RUSTSEC-2025-0130
NoneCVSS
—
EPSS
—
Published
Nov 24, 2025
CISA due date
—
The record
Missing check in ZK proof in CGGMP21 Threshold Signing Protocol
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | cggmp21 | 0 | 0.6.3 |
| crates.io | cggmp21 | 0.0.0-0 | 0.6.3 |
| crates.io | cggmp24 | 0 | 0.7.0-alpha.2 |
| crates.io | cggmp24 | 0.0.0-0 | 0.7.0-alpha.2 |
Related vulnerabilities
- CVE-2025-66016 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3… Same vulnerability
- CVE-2025-66017 CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3… Also affects cggmp21
- RUSTSEC-2025-0128 CGGMP21 presignatures can be used in the way that significantly reduces security Also affects cggmp21