Go/github.com/consensys/gnark CVE-2025-58157: high 7.5, EPSS 0.54%
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
Action: Upgrade github.com/consensys/gnark to 0.13.0 or later.
go get github.com/consensys/gnark@v0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.12.0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-9fvj-xqr2-xwg8
- https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8
- https://nvd.nist.gov/vuln/detail/CVE-2025-58157
- https://github.com/Consensys/gnark/issues/1483
- https://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d
- https://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc
- https://github.com/Consensys/gnark
CVE-2025-58157 · published · modified · JSON