Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
gnark-crypto 代码问题漏洞
Vulnerability Description
gnark-crypto是Consensys开源的一个库。在 BN、BLS12、BLS24 和 BW6 曲线上提供椭圆曲线和基于配对的密码学。 Consensys gnark-crypto 0.11.2及之前版本存在代码问题漏洞，该漏洞源于存在反序列化漏洞，允许签名延展性。
CVSS Information
N/A
Vulnerability Type
N/A