Approved changes feed: RSS · Atom

cpe:2.3:a:0kims:snarkjs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor0Kims (af357ce9-4805-5186-addf-813e98939ffd)
ProductSnarkjs (1f95d0fc-2aaf-5cf5-aa7c-1b19162aa176)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/iden3/snarkjs purl2cpe 2026-06-01 10:13:20.364713
pkg:npm/snarkjs purl2cpe 2026-06-01 10:13:20.364717

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33252 vulnerable 2026-06-08 06:06:22.137784 Details available
iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less than the field modulus.
Published: 2023-05-21T00:00:00.000Z
Updated: 2025-01-21T16:54:23.973Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.