crates.io/risc0-circuit-rv32im CVE-2025-54873: low 2.7, EPSS 0.41%
RISC Zero Underconstrained Vulnerability: Division
Action: Upgrade risc0-circuit-rv32im to 3.0.0 or later.
cargo update -p risc0-circuit-rv32im --precise 3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-f6rc-24x4-ppxp#crates.io/risc0-circuit-rv32im
- nvd: CVE-2025-54873
- https://github.com/risc0/risc0/security/advisories/GHSA-f6rc-24x4-ppxp
- https://github.com/risc0/risc0/pull/3235
- https://github.com/risc0/zirgen/pull/249
- https://github.com/risc0/risc0
CVE-2025-54873 · published · modified · JSON