{"action":"Upgrade github.com/consensys/gnark to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"github.com/consensys/gnark","cve_ids":["CVE-2023-44378"],"ecosystem":"Go","epss":0.00234,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-498w-5j49-vqjg","id":"tcs_01M5KG0C7WSNGBK2TG7HAPZQ56","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-10-09T21:29:55Z","references":["https://osv.dev/vulnerability/GO-2023-2098","https://github.com/zkopru-network/zkopru/issues/116","https://github.com/Consensys/gnark/pull/835","https://github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f","https://github.com/advisories/GHSA-498w-5j49-vqjg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2098","url":"https://osv.dev/vulnerability/GO-2023-2098"}],"summary":"Unsoundness in variable comparison / non-unique binary decomposition in github.com/consensys/gnark"}