—
GO-2025-3929
Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark
Quick fix
GO-2025-3929 — github.com/consensys/gnark: upgrade to the fixed version with the command below.
go get github.com/consensys/gnark@v0.13.0Details
Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/consensys/gnark
Introduced in:
0Fixed in: 0.13.0Fix
go get github.com/consensys/gnark@v0.13.0References
- https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8[ADVISORY]
- https://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d[WEB]
- https://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc[WEB]
- https://github.com/Consensys/gnark/issues/1483[WEB]