Skip to content
OpenAdvisories

Package · Go

github.com/filecoin-project/go-f3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2025-59942

    go-f3 module vulnerable to integer overflow leading to panic

    go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer ov…

    filecoin-project go-f3 github.com/filecoin-project/go-f3 Go
  • Medium 5.9
    CVE-2025-59941

    go-f3 is Vulnerable to Cached Justification Verification Bypass

    go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vulnerability where verification results are cached without properly considering the context of the me…

    filecoin-project go-f3 github.com/filecoin-project/go-f3 Go