Vulnerabilities in Consensys

6 results

Vexday analysis

ConsenSys apresenta um perfil de risco baixo com 6 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa ou com severidade crítica. A fraqueza dominante (CWE-200, exposição de informações) sugere problemas de controle de acesso e vazamento de dados, embora nenhuma descoberta recente (últimos 90 dias) indique evolução ativa do risco.

CVE-2025-58157HIGHgnark affected by denial of service when computing scalar multiplication using fake-GLV algorithmEPSS 0.5%CVE-2024-45040MEDIUMgnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge propertyEPSS 0.4%CVE-2024-50354MEDIUMOut-of-memory during deserialization with crafted inputsEPSS 0.3%CVE-2023-44378HIGHgnark vulnerable to unsoundness in variable comparison/non-unique binary decompositionEPSS 0.2%CVE-2025-57801HIGHgnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checksEPSS 0.2%CVE-2024-45039MEDIUMgnark's Groth16 commitment extension unsound for more than one commitmentEPSS 0.2%