CVE-2025-57801
2 advisories.
Go/github.com/consensys/gnark CVE-2025-57801: critical 9.1, EPSS 0.21%
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
Action: Upgrade github.com/consensys/gnark to 0.14.0 or later.
go get github.com/consensys/gnark@v0.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.0 | - |
Fixed versions
| 0.14.0 |
Sources
- osv: GHSA-95v9-hv42-pwrj
- https://github.com/Consensys/gnark/security/advisories/GHSA-95v9-hv42-pwrj
- https://nvd.nist.gov/vuln/detail/CVE-2025-57801
- https://github.com/Consensys/gnark/commit/0ba6730f05537a351517998add89a61a0d82716e
- https://github.com/Consensys/gnark
- https://pkg.go.dev/vuln/GO-2025-3912
CVE-2025-57801 · published · modified · JSON
Go/github.com/consensys/gnark CVE-2025-57801: critical 9.1, EPSS 0.21%
Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark
Action: Upgrade github.com/consensys/gnark to 0.14.0 or later.
go get github.com/consensys/gnark@v0.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.0 | - |
Fixed versions
| 0.14.0 |
Sources
- osv: GO-2025-3912
- nvd: CVE-2025-57801
- https://github.com/Consensys/gnark/security/advisories/GHSA-95v9-hv42-pwrj
- https://github.com/Consensys/gnark/commit/0ba6730f05537a351517998add89a61a0d82716e
CVE-2025-57801 · published · modified · JSON