Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to missing scalar checks in the Verify and prepareVerification functions. An attacker can produce multiple valid signatures for the same message by manipulating the S value in EdDSA a...

CVE-2025-57801 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...

PT-2025-34495

Name of the Vulnerable Software and Affected Versions: gnark versions prior to 0.14.0 Description: gnark is a zero-knowledge proof system framework. The Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleabili...

Malicious code in @zalastax/nolb-api-s (npm)

The package @zalastax/nolb-api-s was found to contain malicious code...

Malicious code in @zalastax/nolb-eslint-s (npm)

The package @zalastax/nolb-eslint-s was found to contain malicious code...

Malicious code in @zalastax/nolb-google-s (npm)

The package @zalastax/nolb-google-s was found to contain malicious code...

Malicious code in @zalastax/nolb-gulp-s (npm)

The package @zalastax/nolb-gulp-s was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-lib-s (npm)

The package @zalastax/nolb-lion-lib-s was found to contain malicious code...

Malicious code in @zalastax/nolb-lion-s (npm)

The package @zalastax/nolb-lion-s was found to contain malicious code...

Malicious code in @zalastax/nolb-ng-s (npm)

The package @zalastax/nolb-ng-s was found to contain malicious code...

Malicious code in @zalastax/nolb-ngx-s (npm)

The package @zalastax/nolb-ngx-s was found to contain malicious code...

Malicious code in @zalastax/nolb-node-s (npm)

The package @zalastax/nolb-node-s was found to contain malicious code...

Malicious code in @zalastax/nolb-passport-s (npm)

The package @zalastax/nolb-passport-s was found to contain malicious code...

Malicious code in @zalastax/nolb-qmuzik-s (npm)

The package @zalastax/nolb-qmuzik-s was found to contain malicious code...

MAL-2025-12485 Malicious code in @zalastax/nolb-ng-s (npm)

The package @zalastax/nolb-ng-s was found to contain malicious code...

MAL-2025-11667 Malicious code in @zalastax/nolb-google-s (npm)

The package @zalastax/nolb-google-s was found to contain malicious code...

MAL-2025-13470 Malicious code in @zalastax/nolb-qmuzik-s (npm)

The package @zalastax/nolb-qmuzik-s was found to contain malicious code...

Malicious code in @zalastax/nolb-ember-s (npm)

The package @zalastax/nolb-ember-s was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-s (npm)

The package @zalastax/nolb-node-red-s was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-s (npm)

The package @zalastax/nolb-graphql-s was found to contain malicious code...