ShippethEthereum releases, writing, news and network upgrades
Everything64Releases9Articles0Advisories55

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Security advisories and exploited vulnerabilities

Showing only Noir. Show everything
Noir is a domain specific language for zero knowledge proofsnoir-lang/noir on GitHub

55 items match, 39 of them low signal.

The stream

Newest first
Tue 19 May
Load Store Forwarding incorrectly eliminates stores that are read through an IfElse, making Brillig silently return zero instead of correct values (opens in a new tab) · Noir Security High
Tue 14 April
handle_terminator mishandles Jmp in mem2reg when argument alias set is unknown, causing unsound load propagation (opens in a new tab) · Noir Security High
Tue 14 April
add_array_aliases misses “hidden” nested references in MakeArray analysis, enabling unsound mem2reg store elimination (opens in a new tab) · Noir Security High
Tue 14 April
Unsafe usage of `assert_always_fail` (opens in a new tab) · Noir Security High
Tue 14 April
Repeat-load / known-load incorrectly eliminated across call that mutates memory via indirect reference (opens in a new tab) · Noir Security High
Tue 14 April
Array only used in while condition not cloned (opens in a new tab) · Noir Security Critical
Tue 14 April
Can pop from an empty slice (opens in a new tab) · Noir Security Critical
Tue 14 April
Heap corruption in foreign call results with nested tuple arrays (opens in a new tab) · Noir Security Critical CVE-2026-41197
Tue 3 March
ECDSA blackbox functions should not be pure as they have side effects (opens in a new tab) · Noir Security High
Tue 3 March
`convert_slice_push_back` doesn't update length (opens in a new tab) · Noir Security High
Tue 3 March
Unsafe usage of `read_array` (opens in a new tab) · Noir Security High
Tue 3 March
Slice operations create incorrect element_type_sizes array (opens in a new tab) · Noir Security Critical
Tue 3 March
RemoveIfElse incorrectly tracks slice sizes (opens in a new tab) · Noir Security Critical
Tue 3 March
Index in `convert_slice_pop_back` incorrectly calculated (opens in a new tab) · Noir Security Critical
Wed 7 January
Missing `get_inputs_vec` inputs for AES128Encrypt (opens in a new tab) · Noir Security High
Mon, 1 December 2025
Soundness bug allowing proof forgery when casting from Field to u128 (opens in a new tab) · Noir Security Critical

Also collected

Per-package monorepo tags, releases that carry little weight, and publications that post several times a day
Incorrect conditional mutable reference assignment in Brillig (opens in a new tab) · Noir Security Medium
Arrays may be indexed out-of-bounds (opens in a new tab) · Noir Security Medium
`CallGraph::from_ssa` is a potential footgun (opens in a new tab) · Noir Security Low