GHSA-vj64-rjf3-w3v7
NoneCVSS
—
EPSS
—
Published
May 21, 2026
CISA due date
—
The record
Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | p3-challenger | 0 | 0.4.3 |
| crates.io | p3-challenger | 0.5.0 | 0.5.3 |
Related vulnerabilities
- CVE-2026-46654 Plonky3 is a toolkit for polynomial IOPs (PIOPs). Same vulnerability
- CVE-2026-50303 Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows… CWE-1240
- CVE-2026-44410 This vulnerability stems from a business logic flaw.Attackers can exploit legitimate… CWE-1240
- CVE-2025-64647 IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that… CWE-1240
- CVE-2026-27017 uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting… CWE-1240
- CVE-2025-62514 Parsec is a cloud-based application for cryptographically secure file sharing. CWE-1240
- CVE-2026-22705 RustCrypto: Signatures offers support for digital signatures, which provide… CWE-1240
- GHSA-848j-6mx2-7j84 Elliptic Uses a Cryptographic Primitive with a Risky Implementation CWE-1240