{"action":"Upgrade github.com/consensys/gnark-crypto to 0.18.1 or later.","affected":[{"fixed":"0.18.1","introduced":"0.9.1"},{"fixed":"0.19.2","introduced":"0.19.0"}],"component":"github.com/consensys/gnark-crypto","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.18.1","0.19.2"],"ghsa_id":"GHSA-fj2x-735w-74vq","id":"tcs_01M5KF9B5P9NB2F7MPV46FXBXR","modified_at":"2026-09-10T03:50:29.734008925Z","published_at":"2025-10-30T17:10:40Z","references":["https://osv.dev/vulnerability/GHSA-fj2x-735w-74vq","https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-fj2x-735w-74vq","https://github.com/Consensys/gnark-crypto/pull/759","https://github.com/Consensys/gnark-crypto/commit/2e7bf9190a0aac896eeec3876c87c77a35661be7","https://github.com/Consensys/gnark-crypto","https://pkg.go.dev/vuln/GO-2025-4087"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fj2x-735w-74vq","url":"https://osv.dev/vulnerability/GHSA-fj2x-735w-74vq"}],"summary":"gnark-crypto allows unchecked memory allocation during vector deserialization"}