Skip to content
OpenAdvisories

Package · crates.io

tendermint-light-client-verifier

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-6jrf-4jv4-r9mw

    tendermint-rs's Light Client Verifier allows malicious validators to spoof votes from other validators

    Name: ISA-2025-003: Malicious validator can spoof votes from other validators Component: tendermint-rs Criticality: High (Catastrophic Impact; Rare Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md)…

    tendermint-light-client-verifier crates.io