Skip to content
OpenAdvisories

Package · Go

github.com/filecoin-project/go-f3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-59942

    go-f3 module vulnerable to integer overflow leading to panic

    go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer ov…

    filecoin-project go-f3 github.com/filecoin-project/go-f3 Go