GHSA-fj2x-735w-74vq
HighAdvisory
Published 30 Oct 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 47
- of 17,781 indexed, latest versions
- Container images
- 45
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gnark-crypto allows unchecked memory allocation during vector deserialization
Carried by container images the latest versions of 47 of 17,781 indexed charts deploy, on 45 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.12.1, v0.14.0, v0.16.0, v0.17.0+2 more | 0.18.1, 0.19.2 | 45 |
- OSV records
- GHSA-fj2x-735w-74vqGO-2025-4087
Charts affected
47 by stars
Container images carrying it
45 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rss3/ | 26148aa1bc52 | github.com/ github.com/ | 0.18.1 0.18.1 | 4 |
| ghcr.io/ | 5217e3d1fc70 | github.com/ github.com/ | 0.18.1 0.18.1 | 4 |
| ethpandaops/ | d8514b9f4c59 | github.com/ github.com/ | 0.18.1 0.18.1 | 3 |
| rss3/ | d1d2ae6efd05 | github.com/ github.com/ | 0.18.1 0.18.1 | 3 |
| rss3/ | dae8a5bdd7a6 | github.com/ github.com/ | 0.18.1 0.18.1 | 2 |
| rss3/ | a4059dd32c48 | github.com/ github.com/ | 0.18.1 0.18.1 | 2 |
| samcm/ | 91a2d9a015c1 | github.com/ github.com/ | 0.18.1 0.18.1 | 2 |
| ghcr.io/ | 4249e403225a | github.com/ github.com/ | 0.18.1 0.18.1 | 2 |
| 0xpolygon/ | 396d3de26d8b | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| avaprotocol/ | c430ea5c37d6 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| bloxstaking/ | bf6d7d2fdc93 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| erigontech/ | 88706754b627 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethereum/ | 1f36ca5922a5 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethereum/ | 32b878e4144a | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethereum/ | 886ec69b35b0 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethersphere/ | a884fd84b72f | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethpandaops/ | ad26158420dd | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ethpandaops/ | 5c4832e9588f | github.com/ github.com/ | 0.19.2 0.18.1 | 1 |
| ethpandaops/ | 989da6bea4bd | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| flashbots/ | 7c486b5789da | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| gobitfly/ | 1d08a7986348 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| obolnetwork/ | e263be0a7440 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| offchainlabs/ | 9f779fa84b7b | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| offchainlabs/ | e95865866129 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| rss3/ | e8adc09d9c07 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| rss3/ | 45b91380bbe7 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| rss3/ | 96672897ba9e | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| rss3/ | 865a0a6bdf4c | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| rss3/ | 8d9a44c650fa | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| scholtz2/ | 1ec63eca86b6 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| testinprod/ | 0a125bd77a2d | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | c8af1c5aae40 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 752f1aa02438 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 1aba0ffe55ea | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | fd0e3ec7d960 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 23a9ec9b1879 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 41177982c584 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 6650119a385f | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | e459ad3ae758 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | b62113fe1b27 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | d7bdfa7b41da | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 8e3cb38953a3 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 00131e3d1eaf | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| ghcr.io/ | 81edba952403 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |
| quay.io/ | 799c5f566952 | github.com/ github.com/ | 0.18.1 0.18.1 | 1 |