crates.io/risc0-zkvm CVE-2025-54873: low 2.7, EPSS 0.41%
RISC Zero Underconstrained Vulnerability: Division
Action: Upgrade risc0-zkvm to 2.2.0 or later.
cargo update -p risc0-zkvm --precise 2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-f6rc-24x4-ppxp
- nvd: CVE-2025-54873
- https://github.com/risc0/risc0/security/advisories/GHSA-f6rc-24x4-ppxp
- https://github.com/risc0/risc0/pull/3235
- https://github.com/risc0/zirgen/pull/249
- https://github.com/risc0/risc0
CVE-2025-54873 · published · modified · JSON