{"action":"Upgrade github.com/consensys/gnark-crypto to 0.18.1 or later.","affected":[{"fixed":"0.18.1","introduced":"0.9.1"},{"fixed":"0.19.2","introduced":"0.19.0"}],"component":"github.com/consensys/gnark-crypto","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.18.1","0.19.2"],"ghsa_id":"GHSA-fj2x-735w-74vq","id":"tcs_01M5KGBD370G44Q0181404YJ84","modified_at":"2026-02-04T03:47:39.892431Z","published_at":"2025-11-05T18:41:07Z","references":["https://osv.dev/vulnerability/GO-2025-4087","https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-fj2x-735w-74vq","https://github.com/Consensys/gnark-crypto/commit/2e7bf9190a0aac896eeec3876c87c77a35661be7","https://github.com/Consensys/gnark-crypto/pull/759"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-4087","url":"https://osv.dev/vulnerability/GO-2025-4087"}],"summary":"Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto"}