PT-2024-31389 · Gnark · Gnark

🗓️ 06 Sep 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Gnark soundness flaw with multiple commitments; update to 0.11.0+ or use a single commitment via multicommit.

Reporter	Title	Published	Views	Family All 1768
OSV	CLEANSTART-2026-EP15881 Security fixes in cert-manager-webhook-pdns-fips 2.3.0-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-EU52554 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files	10 Jun 202601:02	–	osv
OSV	CLEANSTART-2026-EV66178 Security fixes in gostatsd 28.3.0-r2	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-GY48351 Within HostnameError	30 Apr 202600:53	–	osv
OSV	CLEANSTART-2026-GY66569 Security fixes for CVE-2024-45337, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6v2p-p943-phr9, ghsa-c6gw-w398-hv78, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-p754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gw88-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.15.0-r1, 1.18.3-r0	8 Jun 202612:43	–	osv
OSV	CLEANSTART-2026-HV28992 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3	30 Jan 202615:55	–	osv
OSV	CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1	13 Aug 202612:10	–	osv
OSV	CLEANSTART-2026-JB18761 Security fixes for CVE-2024-45337, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6v2p-p943-phr9, ghsa-c6gw-w398-hv78, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-p754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gw88-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.15.0-r1, 1.18.3-r0	13 Jul 202606:54	–	osv
OSV	CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-JT15863 Security fixes for CVE-2020-8565, CVE-2020-8911, CVE-2020-8912, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 28.3.0-r2	9 Jul 202609:32	–	osv

Source	Link
osv	www.osv.dev/vulnerability/GHSA-q3hw-3gm4-w5cr
osv	www.osv.dev/vulnerability/CVE-2024-45039
osv	www.osv.dev/vulnerability/GO-2024-3122
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45039
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:14599-1
github	www.github.com/Consensys/gnark/security/advisories/GHSA-q3hw-3gm4-w5cr
github	www.github.com/Consensys/gnark/commit/e7c66b000454f4d2a4ae48c005c34154d4cfc2a2
github	www.github.com/Consensys/gnark
suse	www.suse.com/security/cve/CVE-2024-55657
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/QTUY324RV3FFZBHVIWDHRCIOPJHIJIN4

18 Dec 2024 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.2 - 9.8

CVSS 29.3

CVSS 48.7

EPSS0.89633

SSVC