Advisories · Technology
openvm.
Every CVE that names openvm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots
- openvm
- CWE-20
- CVSS 8.7 High
OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification
- openvm
- CWE-754
- CVSS 6.9 Medium
OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments
- openvm
- CWE-20
- CVSS 8.7 High
`openvm-pairing` pairing check missing proper subfield check on scaling factor
- openvm
- CWE-20