{"action":"Upgrade github.com/consensys/gnark to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"github.com/consensys/gnark","cve_ids":["CVE-2023-44378"],"ecosystem":"Go","epss":0.00234,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-498w-5j49-vqjg","id":"tcs_01M5KEW8G99X43TK858VH56N1H","modified_at":"2026-09-10T03:49:24.650234486Z","published_at":"2023-10-04T14:44:08Z","references":["https://osv.dev/vulnerability/GHSA-498w-5j49-vqjg","https://github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg","https://nvd.nist.gov/vuln/detail/CVE-2023-44378","https://github.com/zkopru-network/zkopru/issues/116","https://github.com/Consensys/gnark/pull/835","https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f","https://github.com/Consensys/gnark","https://github.com/advisories/GHSA-498w-5j49-vqjg"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-498w-5j49-vqjg","url":"https://osv.dev/vulnerability/GHSA-498w-5j49-vqjg"}],"summary":"gnark unsoundness in variable comparison / non-unique binary decomposition"}