1 matches found
Insufficient Randomization And Data Exposure
github.com/consensys/gnark is vulnerable to Insufficient Randomization and Data Exposure. The vulnerability is due to the lack of additional randomized values in the commitments, which allows an attacker to deduce the witness values through enumeration if those values are small...
5.9CVSS6.6AI score0.00427EPSS
SaveExploits0References4Affected Software1
20