CVE-2024-45039

Description

Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark

Affected packages (2)

• Go/github.com/consensys/gnarkfrom 0, < 0.11.0
• Go/github.com/consensys/gnarkfrom 0, < 0.11.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-45039
• PATCHhttps://github.com/Consensys/gnark
• WEBhttps://github.com/Consensys/gnark/commit/e7c66b000454f4d2a4ae48c005c34154d4cfc2a2
• WEBhttps://github.com/Consensys/gnark/security/advisories/GHSA-q3hw-3gm4-w5cr
• WEBhttps://pkg.go.dev/vuln/GO-2024-3122