Skip to content
OpenAdvisories

Package · Go

github.com/cometbft/cometbft

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    GHSA-g5xx-c4hv-9ccc

    CometBFT's state syncing validator from malicious node may lead to a chain split

    **Name**: ASA-2024-009: State syncing validator from malicious node may lead to a chain split **Component**: CometBFT **Criticality**: Medium ([ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md): I:Moderate; L: Pos…

    github.com/cometbft/cometbft github.com/cometbft/cometbft/light Go
  • Medium —
    GHSA-hg58-rf2h-6rr7

    CometBFT is unstability during blocksync when syncing from malicious peer

    **Name**: ASA-2024-008: Instability during blocksync when syncing from malicious peer **Component**: CometBFT **Criticality**: Medium ([ACMv1](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md): I:Moderate; L: Possible) **A…

    github.com/cometbft/cometbft Go