{"id":"RUSTSEC-2025-0129","revision":"8082452d2779402b851a8bb8e3efdc92","records":[{"revision":"8082452d2779402b851a8bb8e3efdc92","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2025-0129","aliases":["CVE-2025-66016","GHSA-m95p-425x-x889","RUSTSEC-2025-0130"],"title":"Missing check in ZK proof in CGGMP21 Threshold Signing Protocol","description":"Vulnerability concerns a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key.\n\n### Patches\n* `cggmp21 v0.6.3` is a patch release that contains a fix that introduces this specific missing check.\n* However, we recommend upgrading to `cggmp24 v0.7.0-alpha.2` in which we've introduced many other security checks as a precaution. Follow the [migration guidelines](https://github.com/LFDT-Lockness/cggmp21/blob/v0.7.0-alpha.2/CGGMP21_MIGRATION.md) to upgrade.\n\n### References\nRead our [blog post](https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained) to learn more.","state":0,"publishedAt":"2025-11-24T12:00:00+00:00","modifiedAt":"2025-11-26T06:15:27.498116+00:00","affected":[{"ecosystem":"crates.io","name":"cggmp21","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"0.6.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/cggmp21","https://rustsec.org/advisories/RUSTSEC-2025-0129.html","https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0129","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2025-0129","identifiers":["RUSTSEC-2025-0129","CVE-2025-66016","GHSA-m95p-425x-x889","RUSTSEC-2025-0130"]},"retained":false,"historicalAffected":[]}],"coverage":[]}