Open-source package vulnerability · Rust (crates.io)

CVE-2025-66016: cggmp21 has a missing check in the ZK proof used in CGGMP21

criticalCVSS 4.0 9.3GHSA-m95p-425x-x889

Impact cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key. Patches cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check However, cggmp21 recommends upgrading to cggmp24 v0.7.0-alpha.2 which contains many other security checks as a precaution. Follow migration guideline to upgrade.

Published Nov 25, 2025 · Updated Nov 27, 2025

Affected packages

cggmp21

Ecosystem: Rust (crates.io)
Affected: < 0.6.3
Fixed in: 0.6.3
Check: cargo tree -i cggmp21

cggmp24

Ecosystem: Rust (crates.io)
Affected: < 0.7.0-alpha.2
Fixed in: 0.7.0-alpha.2
Check: cargo tree -i cggmp24

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Impact

cggmp21 concerns a missing check in the ZK proof that enables an attack in which a single malicious signer can reconstruct full private key.

Patches

cggmp21 v0.6.3 is a patch release that contains a fix that introduces this specific missing check
However, cggmp21 recommends upgrading to cggmp24 v0.7.0-alpha.2 which contains many other security checks as a precaution. Follow migration guideline to upgrade.

Workarounds

Update to cggmp21 v0.6.3, a minor release that contains a minimal security patch.

However, for full mitigation, users will need to upgrade to cggmp24 v0.7.0-alpha.2 as it contains many more security check implementations.

Resources

Read this blog post to learn more.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology