Executive brief
Proof forgery due to insufficient randomness in github.com/consensys/gnark
Affected products
- Go github.com/consensys/gnark
Junglewise Threat Intelligence
GO-2023-2119 - Proof forgery due to insufficient randomness in github.com/consensys/gnark
Severity: info ยท Published 2023-10-24
Technologies: github.com/consensys/gnark (Go). Vendors: Go.
Related threats
- GO-2025-3929 - Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark
- GO-2025-3912 - Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark
- GO-2024-3122 - Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark
- GO-2024-3244 - Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark
- GO-2024-3123 - Commitments to private witnesses in Groth16 as implemented break zero-knowledge property in github.com/consensys/gnark