x/vulndb: potential Go vuln in github.com/consensys/gnark: GHSA-rjjm-x32p-m3f7

[GoVulnBot]

In GitHub Security Advisory GHSA-rjjm-x32p-m3f7, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/consensys/gnark	0.9.2	< 0.9.2

Cross references:

• Module github.com/consensys/gnark appears in issue x/vulndb: potential Go vuln in github.com/consensys/gnark: GHSA-498w-5j49-vqjg #2098
• Module github.com/consensys/gnark appears in issue x/vulndb: potential Go vuln in github.com/consensys/gnark: GHSA-7p92-x423-vwj6 #2119

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/consensys/gnark
      versions:
        - fixed: 0.9.2
      packages:
        - package: github.com/consensys/gnark
summary: gnark's range checker gadget allows wider inputs up to word alignment
ghsas:
    - GHSA-rjjm-x32p-m3f7
references:
    - advisory: https://github.com/Consensys/gnark/security/advisories/GHSA-rjjm-x32p-m3f7
    - report: https://github.com/Consensys/gnark/issues/897
    - fix: https://github.com/Consensys/gnark/commit/f528807119e9443df94b8c01fe8ee65abe3c75d8
    - advisory: https://github.com/advisories/GHSA-rjjm-x32p-m3f7

[gopherbot]

Change https://go.dev/cl/542575 mentions this issue: data/reports: add GO-2023-2333.yaml