Incorrect exponentiation results in github.com/consensys/gnark-crypto

GHSA-pffg-92cg-xf5c · GO-2023-2101 · Published 09/10/2023 · updated 20/05/2024

In short

GO-2023-2101 is a not yet rated vulnerability affecting github.com/consensys/gnark-crypto.
Fix: update to 0.12.1 or later.

Package	Affected versions	Patched versions
github.com/consensys/gnark-crypto Go	`< 0.12.1`	`0.12.1`

Running one of these products? Scan your site to see whether it exposes a vulnerable version.