{"action":"Upgrade sp1-recursion-gnark-ffi to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"sp1-recursion-gnark-ffi","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-f77q-r5qm-w4m8","id":"tcs_01M5KEX89NW1RZ43KWBEKGJHCB","modified_at":"2024-10-29T15:37:50Z","published_at":"2024-10-29T15:37:50Z","references":["https://osv.dev/vulnerability/GHSA-f77q-r5qm-w4m8","https://github.com/succinctlabs/sp1/security/advisories/GHSA-f77q-r5qm-w4m8","https://github.com/succinctlabs/sp1/commit/8600d4aa63184ce3df7ccd30c79ac0388eacca52","https://github.com/succinctlabs/sp1"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-f77q-r5qm-w4m8","url":"https://osv.dev/vulnerability/GHSA-f77q-r5qm-w4m8"}],"summary":"sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic"}