{"action":"Upgrade risc0-zkvm to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"2.0.0"}],"component":"risc0-zkvm","cve_ids":["CVE-2025-52484"],"ecosystem":"crates.io","epss":0.00271,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-g3qg-6746-3mg9","id":"tcs_01M5KEXR5YRXFARX44QJTVERW6","modified_at":"2025-06-27T23:59:02Z","published_at":"2025-06-20T18:08:04Z","references":["https://osv.dev/vulnerability/GHSA-g3qg-6746-3mg9","https://github.com/risc0/risc0/security/advisories/GHSA-g3qg-6746-3mg9","https://nvd.nist.gov/vuln/detail/CVE-2025-52484","https://github.com/risc0/risc0/pull/3181","https://github.com/risc0/zirgen/pull/238","https://github.com/risc0/risc0/commit/006d86c363b16d2b2ac42d32d832a209ff8ab4c9","https://github.com/risc0/risc0/commit/1873bbb8a56793edd1f6195242d184cf6cc5175d","https://github.com/risc0/risc0/commit/67f2d81c638bff5f4fcfe11a084ebb34799b7a89","https://github.com/risc0/zirgen/commit/e0e2918302c93e956f73ca2e44aef2b861d8c3ae","https://github.com/risc0/risc0"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-g3qg-6746-3mg9","url":"https://osv.dev/vulnerability/GHSA-g3qg-6746-3mg9"},{"source":"nvd","source_id":"CVE-2025-52484","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52484"}],"summary":"zkVM Underconstrained Vulnerability"}