CVE-2025-58157
gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.
| Software | From | Fixed in |
|---|---|---|
github.com/consensys/gnark
|
0.12.0 | 0.12.0.x |
|
github.com/consensys/gnark
|
0.12.0 | 0.13.0 |
| consensys / gnark | 0.12.0 | 0.12.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime