halo2_gadgets vulnerabilities

CVEs whose affected-version data names the halo2_gadgets package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54496Critical· 9.3

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

▾ Midnightzebrad · zebradEPSS 0.32%via GHSA

halo2_gadgets vulnerabilities (CVEs) · VulnSea