Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

cggmp21

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
0.6.3 (Nov 24, 2025): affected by CVE-2025-66017
Newest unaffected release
Every release is affected by at least one advisory
Advisories
2 · 1 critical, 1 high
Weekly downloads
732
Dependents
0
Releases
15 since 0.0.0 (Oct 6, 2022)
Registry
crates.io
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • CGGMP21 presignatures can be used in the way that significantly reduces security

    Affected: through 0.6.3; all versions.

    No fix released. The latest release, 0.6.3, is still affected.

    100% of cggmp21 downloads in the last 90 days were affected versions (10.5K).

  • CVE-2025-66016Critical 9.3

    CGGMP24 is missing a check in the ZK proof used in CGGMP21

    Affected: fixed in 0.6.3; fixed in 0.6.3.

    Fixed in 0.6.3 (released Nov 24, 2025, 1 day before disclosure).

    The latest release, 0.6.3, is not affected.

    7.5% of cggmp21 downloads in the last 90 days were affected versions (788).