{
  "schema_version": "1.0",
  "url": "https://cerinamroth.com/disclosures/",
  "title": "Security Disclosures — Cerin Amroth",
  "description": "Coordinated vulnerability disclosures from Cerin Amroth Research, released after a fix or disclosure window.",
  "date_modified": "2026-09-25",
  "representations": {
    "json": "https://cerinamroth.com/data/pages/disclosures.json",
    "markdown": "https://cerinamroth.com/data/pages/disclosures.md"
  },
  "headings": [
    {
      "level": 1,
      "id": null,
      "text": "Security Disclosures"
    }
  ],
  "links": [
    {
      "text": "Cerin Amroth",
      "url": "https://cerinamroth.com/"
    },
    {
      "text": "Home",
      "url": "https://cerinamroth.com/"
    },
    {
      "text": "ML",
      "url": "https://cerinamroth.com/ml/"
    },
    {
      "text": "JWST",
      "url": "https://cerinamroth.com/jwst/"
    },
    {
      "text": "Security",
      "url": "https://cerinamroth.com/policy/"
    },
    {
      "text": "Contact",
      "url": "https://cerinamroth.com/#contact"
    },
    {
      "text": "ZisK: a missing sign constraint in signed remainder",
      "url": "https://cerinamroth.com/disclosures/zisk-signed-rem-sign-soundness/"
    },
    {
      "text": "our key",
      "url": "https://cerinamroth.com/.well-known/cerinamroth-pubkey.asc"
    },
    {
      "text": "security@cerinamroth.com",
      "url": "mailto:security@cerinamroth.com"
    }
  ],
  "structured_data": [
    {
      "@context": "https://schema.org",
      "@type": "BreadcrumbList",
      "itemListElement": [
        {
          "@type": "ListItem",
          "position": 1,
          "name": "Home",
          "item": "https://cerinamroth.com/"
        },
        {
          "@type": "ListItem",
          "position": 2,
          "name": "Security disclosures",
          "item": "https://cerinamroth.com/disclosures/"
        }
      ]
    },
    {
      "@context": "https://schema.org",
      "@type": "CollectionPage",
      "name": "Security Disclosures",
      "description": "Coordinated vulnerability disclosures from Cerin Amroth Research, released after a fix or disclosure window.",
      "url": "https://cerinamroth.com/disclosures/",
      "inLanguage": "en"
    }
  ],
  "content_markdown": "[Cerin Amroth](https://cerinamroth.com/) · Security Disclosures [Home](https://cerinamroth.com/)[ML](https://cerinamroth.com/ml/)[JWST](https://cerinamroth.com/jwst/)[Security](https://cerinamroth.com/policy/)[Contact](https://cerinamroth.com/#contact)\n\n \n\n# Security Disclosures\n\nCoordinated vulnerability disclosures, published after a fix shipped or the disclosure window closed.\n\n- [ZisK: a missing sign constraint in signed remainder](https://cerinamroth.com/disclosures/zisk-signed-rem-sign-soundness/)FIXED\n\n0xPolygonHermez/zisk · CWE-682 (Incorrect Calculation), under-constrained circuit\n\n Coordinated disclosure. Published only after a fix shipped or the disclosure window closed. · Verify signatures against [our key](https://cerinamroth.com/.well-known/cerinamroth-pubkey.asc). · [security@cerinamroth.com](mailto:security@cerinamroth.com)\n  © 2026 Cerin Amroth Security Research, LLC · CERIN AMROTH SECURITY RESEARCH™\n",
  "content_sha256": "72466365e7ee0fd48fcbef8f7727c3ee818b5548e417b7eaaf3c85121a937ad5"
}