PT-2025-45828 · Go · Github.Com/Consensys/Gnark-Crypto

Publicado 2025-10-30 · Atualizado 2025-10-30

OSV

Gnark-crypto doesn't range check input values during ECDSA and EdDSA deserialization in github.com/consensys/gnark-crypto

Identificadores relacionados

GO-2025-4027

Produtos afetados

Github.Com/Consensys/Gnark-Crypto

Referências · 6

• https://github.com/Consensys/gnark-crypto/pull/449 · Nota
• https://github.com/Consensys/gnark-crypto/releases/tag/v0.12.0 · Nota
• https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-fr8m-434r-g3xp · Nota
• https://osv.dev/vulnerability/GO-2025-4027 · Aviso do Fabricante
• https://github.com/advisories/GHSA-9xfq-8j3r-xp5g · Nota
• https://go.dev/blog/defer-panic-and-recover · Nota