Consensys gnark 0.12.0
Approved changes feed: RSS · Atom
cpe:2.3:a:consensys:gnark:0.12.0:*:*:*:*:*:*:*
part: a version: 0.12.0 update: *
| Vendor | Consensys (fcebead7-fa97-56b1-88f3-44379e82f67a) |
|---|---|
| Product | Gnark (2f6a660b-2832-5483-aa44-8b810ad26af8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/consensys/gnark-crypto |
purl2cpe | 2026-06-01 10:13:16.042620 |
pkg:golang/github.com/consensys/gnark-crypto |
purl2cpe | 2026-06-01 10:13:16.042621 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58157 |
vulnerable | 2026-06-08 07:35:17.370340 |
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
HIGH (7.5)
gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.
Published: 2025-08-29T21:21:35.677Z
Updated: 2025-09-02T14:09:48.386Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.