cggmp21

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

1. Critical, CVSS 9.3crates.ioPublished 25 Nov 2025

   cggmp21 has a missing check in the ZK proof used in CGGMP21

   CVE-2025-66016 · GHSA-m95p-425x-x889

   Affected

   • crates.io cggmp21 < 0.6.3

   Fixed in

   0.6.3· Vendor fix available

   Issue

   Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check However, cggmp21 recommends upgrading to cggmp24 v0.7.0-alpha.2 which contains many other security checks as a precaution. Follow migration guideline to upgrade. Workarounds Update to cggmp21 v0.6.3, a minor release that contains a minimal security patch. However, for full mitigation, users will need to upgrade to cggmp24 v0.7.0-alpha.2 as it contains many more security check implementations. Resources Read this blog post to learn more.

   Recommended action: Upgrade to 0.6.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

   Sources:github.comSource checked 26 Oct 2026, 15:39 UTCEvidence →
2. Low, CVSS 2.7crates.ioPublished 12 Nov 2024

   cggmp21 vulnerable to ambiguous challenge derivation

   GHSA-rm66-9gh4-4gp8

   Affected

   • crates.io cggmp21 < 0.4.0

   Fixed in

   0.4.0· Vendor fix available

   Issue

   Challenge derivation in non-interactive ZK proofs was ambiguous and that could lead to security vulnerability (however, it's unknown if it could be exploited).

   Recommended action: Upgrade to 0.4.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

   Sources:github.comSource checked 26 Oct 2026, 15:38 UTCEvidence →