| id: GO-2023-2333 |
| modules: |
| - module: github.com/consensys/gnark |
| versions: |
| - fixed: 0.9.2-0.20231110170422-f528807119e9 |
| vulnerable_at: 0.9.1 |
| packages: |
| - package: github.com/consensys/gnark/std/rangecheck |
| symbols: |
| - commitChecker.commit |
| - nbR1CSConstraints |
| - nbPLONKConstraints |
| summary: Range checker gadget allows wider inputs than allowed in github.com/consensys/gnark |
| ghsas: |
| - GHSA-rjjm-x32p-m3f7 |
| credits: |
| - '@ultrainstinct30' |
| references: |
| - advisory: https://github.com/Consensys/gnark/security/advisories/GHSA-rjjm-x32p-m3f7 |
| - web: https://github.com/Consensys/gnark/issues/897 |
| - fix: https://github.com/Consensys/gnark/commit/f528807119e9443df94b8c01fe8ee65abe3c75d8 |
