tocsin

CVE-2026-46654

1 advisory.

crates.io/p3-challenger CVE-2026-46654: high, EPSS 0.13%

Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss

Action: Upgrade p3-challenger to 0.4.3 or later.

cargo update -p p3-challenger --precise 0.4.3
cargo update -p p3-challenger --precise 0.5.3

Affected

introducedfixedlast affected
00.4.3-
0.5.00.5.3-

Fixed versions

0.4.30.5.3

Sources

CVE-2026-46654 · published · modified · JSON