Skip to main content

Consensys

8 CVEs vendor

Monthly

CVE-2025-58157 Aug 29, 22:15 Go HIGH POC PATCH This Week

gnark is a zero-knowledge proof system framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Suse Gnark Consensys
NVD GitHub
CVSS 3.1
7.5
EPSS
0.2%
CVE-2025-57801 Aug 22, 20:15 Go HIGH POC PATCH This Week

gnark is a zero-knowledge proof system framework. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Jwt Attack Gnark Consensys
NVD GitHub
CVSS 4.0
8.6
EPSS
0.0%
CVE-2024-50354 Oct 31, 16:15 Go MEDIUM POC PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Denial Of Service Deserialization Gnark Consensys
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2024-45040 Sep 06, 13:15 Go MEDIUM PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Gnark Crypto Consensys
NVD GitHub
CVSS 3.1
5.9
EPSS
0.4%
CVE-2024-45039 Sep 06, 13:15 Go MEDIUM PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Gnark Crypto Consensys
NVD GitHub
CVSS 3.1
6.2
EPSS
0.2%
CVE-2024-23688 Jan 19, 22:15 Maven MEDIUM PATCH This Month

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Discovery Consensys
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-44378 Oct 09, 14:15 Go MEDIUM PATCH This Month

gnark is a zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Canonical Gnark Consensys
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-44273 Sep 28, 04:15 Go CRITICAL PATCH Act Now

Consensys gnark-crypto through 0.11.2 allows Signature Malleability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Gnark Crypto Consensys
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
EPSS 0% CVSS 7.5
HIGH POC PATCH This Week

gnark is a zero-knowledge proof system framework. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Suse Gnark +1
NVD GitHub
EPSS 0% CVSS 8.6
HIGH POC PATCH This Week

gnark is a zero-knowledge proof system framework. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Jwt Attack Gnark +1
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Denial Of Service Deserialization Gnark +1
NVD GitHub
EPSS 0% CVSS 5.9
MEDIUM PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Gnark Crypto Consensys
NVD GitHub
EPSS 0% CVSS 6.2
MEDIUM PATCH This Month

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Gnark Crypto Consensys
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Discovery Consensys
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

gnark is a zk-SNARK library that offers a high-level API to design circuits. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Canonical +2
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Consensys gnark-crypto through 0.11.2 allows Signature Malleability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Gnark Crypto Consensys
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy