HIGHcrates.io
GHSA-8frv-q972-9rq5· CVE-2025-66017, RUSTSEC-2025-0127cggmp24 and cggmp21 are vulnerable to signature forgery through altered presignatures
Modified: 11/27/2025
package
crates.io/cggmp24
pkg:crates.io/cggmp24
CRITICALcrates.io
GHSA-m95p-425x-x889· CVE-2025-66016, RUSTSEC-2025-0129cggmp21 has a missing check in the ZK proof used in CGGMP21
Modified: 11/27/2025
—crates.io
RUSTSEC-2025-0128· CVE-2025-66017, GHSA-8frv-q972-9rq5CGGMP21 presignatures can be used in the way that significantly reduces security
Modified: 11/26/2025
—crates.io
RUSTSEC-2025-0130· CVE-2025-66016, GHSA-m95p-425x-x889Missing check in ZK proof in CGGMP21 Threshold Signing Protocol
Modified: 11/26/2025