EUVD-2024-2765

Malicious code in bioql PyPI...

CVE-2024-45040

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses in Groth16 as implemented break the zero-knowledge property. The vulnerability affects only Groth16 proofs with commitments. Notably, PLONK proofs are not...

PT-2024-31391

Name of the Vulnerable Software and Affected Versions gnark versions prior to 0.11.0 Description The vulnerability affects the zero-knowledge property of Groth16 proofs with commitments in the gnark library. It allows an attacker to potentially recover committed private witnesses by brute-forcing...