crates.ioPackage

cggmp24

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release: 0.1.0 (Dec 6, 2024): affected by 2 advisories
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 2 · 1 critical, 1 high

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2025-66017High 8.2
CGGMP21 presignatures can be used in the way that significantly reduces security
Affected: fixed in 0.7.0-alpha.2; fixed in 0.7.0-alpha.2.
Fixed in 0.7.0-alpha.2 (released Nov 24, 2025, 1 day before disclosure).
The latest release, 0.1.0, is still affected.
0.5% of cggmp24 downloads in the last 90 days were affected versions (25).
CVE-2025-66016Critical 9.3
CGGMP24 is missing a check in the ZK proof used in CGGMP21
Affected: fixed in 0.7.0-alpha.2; fixed in 0.7.0-alpha.2.
Fixed in 0.7.0-alpha.2 (released Nov 24, 2025, 1 day before disclosure).
The latest release, 0.1.0, is still affected.
0.5% of cggmp24 downloads in the last 90 days were affected versions (25).