{"action":"Upgrade risc0-ethereum-contracts to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"risc0-ethereum-contracts","cve_ids":["CVE-2025-52884"],"ecosystem":"crates.io","epss":0.00414,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-gjv3-89hh-9xq2","id":"tcs_01M5KF00MPN8Z7308EETMHDVMS","modified_at":"2025-06-25T21:42:11.838495Z","published_at":"2025-06-25T21:27:59Z","references":["https://osv.dev/vulnerability/GHSA-gjv3-89hh-9xq2","https://github.com/risc0/risc0-ethereum/security/advisories/GHSA-gjv3-89hh-9xq2","https://nvd.nist.gov/vuln/detail/CVE-2025-52884","https://github.com/risc0/risc0-ethereum/pull/605","https://github.com/risc0/risc0-ethereum/commit/3bbac859c7132b21ba5fdf2d47f1dd52e7e73d98","https://docs.beboundless.xyz/developers/steel/how-it-works#verifying-the-proof-onchain","https://github.com/risc0/risc0-ethereum","https://github.com/risc0/risc0-ethereum/blob/ff0cb9253a87945b653b825711b8b5075f8b7545/examples/erc20-counter/contracts/src/Counter.sol#L56-L63","https://github.com/risc0/risc0-ethereum/releases/tag/v2.1.1","https://github.com/risc0/risc0-ethereum/releases/tag/v2.2.0"],"severity":{"label":"low","score":1.7},"sources":[{"source":"osv","source_id":"GHSA-gjv3-89hh-9xq2","url":"https://osv.dev/vulnerability/GHSA-gjv3-89hh-9xq2"},{"source":"nvd","source_id":"CVE-2025-52884","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52884"}],"summary":"RISC Zero Ethereum invalid commitment with digest value of zero accepted by Steel.validateCommitment"}