{"action":"Upgrade p3-challenger to 0.4.3 or later.","affected":[{"fixed":"0.4.3","introduced":"0"},{"fixed":"0.5.3","introduced":"0.5.0"}],"component":"p3-challenger","cve_ids":["CVE-2026-46654"],"ecosystem":"crates.io","epss":0.00108,"exploited":false,"fixed_versions":["0.4.3","0.5.3"],"ghsa_id":"GHSA-vj64-rjf3-w3v7","id":"tcs_01M5KF3KNW6SA7SMD98XY5059Y","modified_at":"2026-06-11T14:15:08.995914138Z","published_at":"2026-05-21T20:24:21Z","references":["https://osv.dev/vulnerability/GHSA-vj64-rjf3-w3v7","https://github.com/Plonky3/Plonky3/security/advisories/GHSA-vj64-rjf3-w3v7","https://nvd.nist.gov/vuln/detail/CVE-2026-46654","https://github.com/Plonky3/Plonky3"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GHSA-vj64-rjf3-w3v7","url":"https://osv.dev/vulnerability/GHSA-vj64-rjf3-w3v7"},{"source":"nvd","source_id":"CVE-2026-46654","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46654"}],"summary":"Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss"}