Vulnerabilities > Consensys

DATE CVE VULNERABILITY TITLE RISK
2024-01-19 CVE-2024-23688 Use of Insufficiently Random Values vulnerability in Consensys Discovery
Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session.
network
low complexity
consensys CWE-330
5.3
2023-10-09 CVE-2023-44378 Incorrect Comparison vulnerability in Consensys Gnark
gnark is a zk-SNARK library that offers a high-level API to design circuits.
local
low complexity
consensys CWE-697
5.5
2023-09-28 CVE-2023-44273 Deserialization of Untrusted Data vulnerability in Consensys Gnark-Crypto
Consensys gnark-crypto through 0.11.2 allows Signature Malleability.
network
low complexity
consensys CWE-502
critical
9.8