—
GO-2025-3912
Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark
Quick fix
GO-2025-3912 — github.com/consensys/gnark: upgrade to the fixed version with the command below.
go get github.com/consensys/gnark@v0.14.0Details
Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/consensys/gnark
Introduced in:
0Fixed in: 0.14.0Fix
go get github.com/consensys/gnark@v0.14.0