RUSTSEC-2025-0128
NoneCVSS
—
EPSS
—
Published
Nov 24, 2025
CISA due date
—
The record
CGGMP21 presignatures can be used in the way that significantly reduces security
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | cggmp21 | 0 | No fix |
| crates.io | cggmp21 | 0.0.0-0 | No fix |
| crates.io | cggmp24 | 0 | 0.7.0-alpha.2 |
| crates.io | cggmp24 | 0.0.0-0 | 0.7.0-alpha.2 |
Related vulnerabilities
- CVE-2025-66017 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3… Same vulnerability
- CVE-2025-66016 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3… Also affects cggmp21
- RUSTSEC-2025-0130 Missing check in ZK proof in CGGMP21 Threshold Signing Protocol Also affects cggmp21