{"id":"RUSTSEC-2025-0130","revision":"bce3a5b97d594e3690de3d75b8584c55","records":[{"revision":"bce3a5b97d594e3690de3d75b8584c55","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2025-0130","aliases":["CVE-2025-66016","GHSA-m95p-425x-x889","RUSTSEC-2025-0129"],"title":"Missing check in ZK proof in CGGMP21 Threshold Signing Protocol","description":"Vulnerability concerns a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key.\n\n### Patches\n* `cggmp21 v0.6.3` is a patch release that contains a fix that introduces this specific missing check.\n* However, we recommend upgrading to `cggmp24 v0.7.0-alpha.2` in which we've introduced many other security checks as a precaution. Follow the [migration guidelines](https://github.com/LFDT-Lockness/cggmp21/blob/v0.7.0-alpha.2/CGGMP21_MIGRATION.md) to upgrade.\n\n### References\nRead our [blog post](https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained) to learn more.","state":0,"publishedAt":"2025-11-24T12:00:00+00:00","modifiedAt":"2025-11-26T06:15:27.507193+00:00","affected":[{"ecosystem":"crates.io","name":"cggmp24","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"0.7.0-alpha.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/cggmp24","https://rustsec.org/advisories/RUSTSEC-2025-0130.html","https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2025-0130","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2025-0130","identifiers":["RUSTSEC-2025-0130","CVE-2025-66016","GHSA-m95p-425x-x889","RUSTSEC-2025-0129"]},"retained":false,"historicalAffected":[]}],"coverage":[]}