CVE-2024-45039
2 advisories.
Go/github.com/consensys/gnark CVE-2024-45039: medium 6.2, EPSS 0.19%
gnark's Groth16 commitment extension unsound for more than one commitment
Action: Upgrade github.com/consensys/gnark to 0.11.0 or later.
go get github.com/consensys/gnark@v0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: GHSA-q3hw-3gm4-w5cr
- https://github.com/Consensys/gnark/security/advisories/GHSA-q3hw-3gm4-w5cr
- https://nvd.nist.gov/vuln/detail/CVE-2024-45039
- https://github.com/Consensys/gnark/commit/e7c66b000454f4d2a4ae48c005c34154d4cfc2a2
- https://github.com/Consensys/gnark
- https://pkg.go.dev/vuln/GO-2024-3122
CVE-2024-45039 · published · modified · JSON
Go/github.com/consensys/gnark CVE-2024-45039: unknown, EPSS 0.19%
Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark
Action: Upgrade github.com/consensys/gnark to 0.11.0 or later.
go get github.com/consensys/gnark@v0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
CVE-2024-45039 · published · modified · JSON