snark-verifier vulnerabilities
CVEs whose affected-version data names the snark-verifier package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61618Medium· 6.9SNARK Verifier: noncanonical accumulator limb decoding
SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without consistently enforcing canonical limb bounds before elliptic-curve coordinate reconstruction. `PlonkProof::read` sele…
▾ Sunlitaxiom-crypto · snark-verifierEPSS 0.37%via CVEORG
CVE-2026-62337Medium· 6.9SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements
SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. `EcPointLoader::multi_scalar_multiplication` places a `Value::Assigned(_)` base pai…
▾ Sunlitaxiom-crypto · snark-verifierEPSS 0.30%via CVEORG