Package · crates.io

tendermint-light-client-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2022-23507

Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-clien…

informalsystems tendermint-rs tendermint-light-client-verifier tendermint-light-client crates.io

Dec 15, 2022