Security: noir-lang/noir
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Incorrect conditional mutable reference assignment in BrilligGHSA-v2q4-prvf-7h73 published
Jun 9, 2026 by Savio-SouModerate -
Signed 128-bit `div`/`mod` overflow check is silently bypassed in `expand_signed_math`GHSA-2v53-vfw3-w489 published
May 19, 2026 by Savio-SouModerate -
Function result mutation bug in BrilligGHSA-wvh3-mhm3-7wwv published
May 19, 2026 by Savio-SouModerate -
In Brillig, variable doesn't seem to update inside an inlined loopGHSA-35pp-g9jq-9vf7 published
May 19, 2026 by Savio-SouModerate -
Constant folding deduplication bug in BrilligGHSA-qqxj-59g5-7jcv published
May 19, 2026 by Savio-SouModerate -
Array aliasing bug in BrilligGHSA-35h6-769r-84c9 published
May 19, 2026 by Savio-SouModerate -
Incorrect mutable reference handling in BrilligGHSA-mfqg-6wvq-m7mr published
May 19, 2026 by Savio-SouModerate -
Load Store Forwarding incorrectly eliminates stores that are read through an IfElse, making Brillig silently return zero instead of correct valuesGHSA-j4p3-qjx6-rmvx published
May 19, 2026 by Savio-SouHigh -
Non-dominating RangeCheck removes sibling-branch truncate in BrilligGHSA-w58m-gfcx-8pjq published
Apr 20, 2026 by Savio-SouModerate -
Brillig gets confused with no-op loops, getting a stale variable value through mutable referenceGHSA-jhqf-jg5f-f357 published
Apr 20, 2026 by Savio-SouModerate