Go/github.com/consensys/gnark CVE-2024-50354: medium 5.5, EPSS 0.33%
Gnark out-of-memory during deserialization with crafted inputs
Action: Upgrade github.com/consensys/gnark to 0.11.1 or later.
go get github.com/consensys/gnark@v0.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.1 | - |
Fixed versions
| 0.11.1 |
Sources
- osv: GHSA-cph5-3pgr-c82g
- https://github.com/Consensys/gnark/security/advisories/GHSA-cph5-3pgr-c82g
- https://nvd.nist.gov/vuln/detail/CVE-2024-50354
- https://github.com/Consensys/gnark/pull/1307
- https://github.com/Consensys/gnark/commit/47ae846339add2bdf9983e499342bfdfe195191d
- https://github.com/Consensys/gnark
- https://github.com/advisories/GHSA-cph5-3pgr-c82g
CVE-2024-50354 · published · modified · JSON