Skip to content
OpenAdvisories

Package · crates.io

anchor-lang

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-45137

    Anchor: Program<'info, System> is not properly validated

    Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any program id when requiring the system program id, causing false assumptions resultin…

    solana-foundation anchor anchor-lang crates.io
  • High —
    GHSA-429q-fhh4-r6hj

    Anchor: `InterfaceAccount` allows account substitution between unexpected types

    ### Impact Any uses of `InterfaceAccount` allows another unexpected account type to be passed, after https://github.com/solana-foundation/anchor/pull/3837 disabled discriminator checking for this type. The bug was originally reported and fixed in https://gith…

    anchor-lang crates.io