GHSA-x2hw-px52-wp4m
Medium · 5.3CVSS
5.3
EPSS
—
Published
Mar 13, 2026
CISA due date
—
The record
rs-soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | soroban-sdk | 0 | 22.0.11 |
| crates.io | soroban-sdk | 23.0.0 | 23.5.3 |
| crates.io | soroban-sdk | 25.0.0 | 25.3.0 |
Related vulnerabilities
- CVE-2026-32322 soroban-sdk is a Rust SDK for Soroban contracts. Same vulnerability
- GHSA-96xm-fv9w-pf3f soroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64 Also affects soroban-sdk
- CVE-2026-24889 soroban-sdk is a Rust SDK for Soroban contracts. Also affects soroban-sdk
- CVE-2026-101913 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-697
- CVE-2026-101912 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in… CWE-697
- CVE-2026-90711 proxy-addr is a Node.js module that determines a request's client address behind trusted… CWE-697
- CVE-2026-64836 ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control… CWE-697
- CVE-2026-56101 OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the… CWE-697