crates.io/risc0-zkvm CVE-2025-52484: low, EPSS 0.27%
zkVM Underconstrained Vulnerability
Action: Upgrade risc0-zkvm to 2.1.0 or later.
cargo update -p risc0-zkvm --precise 2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-g3qg-6746-3mg9
- https://github.com/risc0/risc0/security/advisories/GHSA-g3qg-6746-3mg9
- https://nvd.nist.gov/vuln/detail/CVE-2025-52484
- https://github.com/risc0/risc0/pull/3181
- https://github.com/risc0/zirgen/pull/238
- https://github.com/risc0/risc0/commit/006d86c363b16d2b2ac42d32d832a209ff8ab4c9
- https://github.com/risc0/risc0/commit/1873bbb8a56793edd1f6195242d184cf6cc5175d
- https://github.com/risc0/risc0/commit/67f2d81c638bff5f4fcfe11a084ebb34799b7a89
- https://github.com/risc0/zirgen/commit/e0e2918302c93e956f73ca2e44aef2b861d8c3ae
- https://github.com/risc0/risc0
CVE-2025-52484 · published · modified · JSON