CVE-2026-62334 OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, OpenVmHalo2Verifier.verify constructs raw proof calldata from user-controlled proofData, performs a staticcall to addressthis, and...