Go/github.com/consensys/gnark-crypto: low
gnark-crypto's exponentiation in the pairing target group GT using GLV can give incorrect results
Action: Upgrade github.com/consensys/gnark-crypto to 0.12.1 or later.
go get github.com/consensys/gnark-crypto@v0.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.1 | - |
Fixed versions
| 0.12.1 |
Sources
- osv: GHSA-pffg-92cg-xf5c
- https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-pffg-92cg-xf5c
- https://github.com/Consensys/gnark-crypto/pull/213
- https://github.com/Consensys/gnark-crypto/pull/451
- https://github.com/Consensys/gnark-crypto/commit/ec6be1a037f7c496d595c541a8a8d31c47bcfa3d
- https://eprint.iacr.org/2015/565
- https://github.com/Consensys/gnark-crypto
published · modified · JSON