Contact [email protected].
Repository navigation
Security: openvm-org/openvm
Security
SECURITY.md
-
Rust std main failures are ignored by guest startupGHSA-5f24-43wm-7gr2 published
Nov 4, 2026 by stephenh-axiom-xyzHigh -
RV32IM transpilation can allow execution to continue past abort instructionsGHSA-6p9w-9j7q-867r published
Nov 4, 2026 by stephenh-axiom-xyzHigh -
OpenVM k256/p256 point and scalar helpers observe noncanonical representationsGHSA-3c6x-fcmq-fm7v published
Nov 4, 2026 by stephenh-axiom-xyzModerate -
Public-key construction does not enforce canonical y coordinatesGHSA-hf63-jcf3-9wm8 published
Nov 4, 2026 by stephenh-axiom-xyzModerate -
Noncanonical selected roots can change elliptic-curve decompression resultsGHSA-3fv9-jqjf-qp93 published
Nov 4, 2026 by stephenh-axiom-xyzModerate -
OpenVmHalo2Verifier accepts non-canonical app commitmentsGHSA-w82q-w67c-67wv published
Jun 26, 2026 by shuklaayushModerate -
OpenVmHalo2Verifier self-call can bypass proof verificationGHSA-j29p-wr24-hp4f published
Jun 26, 2026 by shuklaayushCritical -
MemoryMerkleAir allows below-leaf rows to alter memory rootsGHSA-396x-v8w4-9x82 published
Jun 26, 2026 by shuklaayushCritical -
`openvm-pairing` pairing check missing proper subfield check on scaling factorGHSA-76mq-v757-53gr published
May 15, 2026 by jpw-axiomCritical -
SHA-256 and Keccak circuits under-constrainedGHSA-9jfx-4f4f-497j published
May 15, 2026 by jpw-axiomHigh
Learn more about advisories related to openvm-org/openvm in the GitHub Advisory Database