{"action":"Upgrade sp1-recursion-circuit to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"sp1-recursion-circuit","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-8m24-3cfx-9fjw","id":"tcs_01M5KEVVECA912YH9HEKZ2GY3F","modified_at":"2024-11-08T16:44:15Z","published_at":"2024-11-08T16:44:15Z","references":["https://osv.dev/vulnerability/GHSA-8m24-3cfx-9fjw","https://github.com/succinctlabs/sp1/security/advisories/GHSA-8m24-3cfx-9fjw","https://github.com/succinctlabs/sp1/commit/79884ffb1a2d10bfd2c272f864033577a052468a","https://github.com/succinctlabs/sp1"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-8m24-3cfx-9fjw","url":"https://osv.dev/vulnerability/GHSA-8m24-3cfx-9fjw"}],"summary":"sp1 has insufficient observation of cumulative sum"}