HIGHcrates.io
GHSA-8frv-q972-9rq5· CVE-2025-66017, RUSTSEC-2025-0127cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
Modified: 11/27/2025
package
crates.io/cggmp21
pkg:crates.io/cggmp21
CRITICALcrates.io
GHSA-m95p-425x-x889· CVE-2025-66016, RUSTSEC-2025-0129cggmp21 has a missing check in the ZK proof used in CGGMP21
Modified: 11/27/2025
LOWcrates.io
GHSA-rm66-9gh4-4gp8· RUSTSEC-2024-0393cggmp21 vulnerable to ambiguous challenge derivation
Modified: 10/28/2025
—crates.io
RUSTSEC-2024-0393· GHSA-rm66-9gh4-4gp8Ambiguous challenge derivation
Modified: 10/28/2025
—crates.io
RUSTSEC-2025-0127· CVE-2025-66017, GHSA-8frv-q972-9rq5CGGMP21 presignatures can be used in the way that significantly reduces security
Modified: 11/26/2025
—crates.io
RUSTSEC-2025-0129· CVE-2025-66016, GHSA-m95p-425x-x889Missing check in ZK proof in CGGMP21 Threshold Signing Protocol
Modified: 11/26/2025