EUVD-2025-2513

Malicious code in bioql PyPI...

EUVD-2025-2502

Malicious code in bioql PyPI...

EUVD-2025-2527

Malicious code in bioql PyPI...

EUVD-2024-18671

Malicious code in bioql PyPI...

EUVD-2022-26855

Malicious code in bioql PyPI...

EUVD-2022-26766

Malicious code in bioql PyPI...

EUVD-2023-26101

Malicious code in bioql PyPI...

EUVD-2022-26688

Malicious code in bioql PyPI...

EUVD-2023-26092

Malicious code in bioql PyPI...

EUVD-2025-11042

Malicious code in bioql PyPI...

EUVD-2025-2506

Malicious code in bioql PyPI...

EUVD-2025-2503

Malicious code in bioql PyPI...

EUVD-2025-2516

Malicious code in bioql PyPI...

EUVD-2025-2541

Malicious code in bioql PyPI...

EUVD-2022-26785

Malicious code in bioql PyPI...

EUVD-2023-26215

Malicious code in bioql PyPI...

EUVD-2025-21521

Malicious code in bioql PyPI...

Signature Malleability

github.com/consensys/gnark is vulnerable to signature malleability. The vulnerability is due to improper validation of the S value in EdDSA and ECDSA signatures not enforcing 0 ≤ S order, which allows an attacker to create multiple valid signatures for the same public input, potentially enabling...

GO-2025-3912 Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark

Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark...

CVE-2025-57801 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value from a signature without asserting that 0 ≤ S order, leading to a signature malleability vulnerability. Because gnark’s native EdDSA and ECDSA circuits lack...