Skip to content
OpenAdvisories

Package · Go

github.com/cometbft/cometbft

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low —
    GHSA-555p-m4v6-cqxv

    ASA-2024-004: Default configuration param for Evidence may limit window of validity

    ## ASA-2024-004: Default configuration param for Evidence may limit window of validity **Component**: CometBFT **Criticality**: Low **Affected versions**: All **Affected users**: Validators, Chain Builders + Maintainers ## Summary A default configuration in C…

    github.com/cometbft/cometbft Go
  • Low —
    GHSA-hq58-p9mv-338c

    CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation

    ## Amulet Security Advisory for CometBFT: ASA-2023-002 **Component**: CometBFT **Criticality:** Low **Affected versions:** All **Affected users:** Validators, Chain Builders + Maintainers # Summary A default configuration in CometBFT has been found to be larg…

    github.com/cometbft/cometbft Go
  • Low 3.7
    CVE-2023-34450

    CometBFT PeerState JSON serialization deadlock

    CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct `PeerState` is serialized to JSON introduced a dea…

    cometbft cometbft github.com/cometbft/cometbft Go