Skip to content
OpenAdvisories

Package · crates.io

tendermint-light-client-verifier

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-6jrf-4jv4-r9mw

    tendermint-rs's Light Client Verifier allows malicious validators to spoof votes from other validators

    Name: ISA-2025-003: Malicious validator can spoof votes from other validators Component: tendermint-rs Criticality: High (Catastrophic Impact; Rare Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md)…

    tendermint-light-client-verifier crates.io
  • Medium 5.4
    CVE-2022-23507

    Light client verification not taking into account chain ID

    Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-clien…

    informalsystems tendermint-rs tendermint-light-client-verifier tendermint-light-client crates.io