Go/github.com/consensys/gnark-crypto: high 7.5
gnark-crypto allows unchecked memory allocation during vector deserialization
Action: Upgrade github.com/consensys/gnark-crypto to 0.18.1 or later.
go get github.com/consensys/gnark-crypto@v0.18.1go get github.com/consensys/gnark-crypto@v0.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.1 | 0.18.1 | - |
| 0.19.0 | 0.19.2 | - |
Fixed versions
| 0.18.1 | 0.19.2 |
Sources
- osv: GHSA-fj2x-735w-74vq
- https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-fj2x-735w-74vq
- https://github.com/Consensys/gnark-crypto/pull/759
- https://github.com/Consensys/gnark-crypto/commit/2e7bf9190a0aac896eeec3876c87c77a35661be7
- https://github.com/Consensys/gnark-crypto
- https://pkg.go.dev/vuln/GO-2025-4087
published · modified · JSON