Skip to content
OpenAdvisories

Package · Go

github.com/filecoin-project/go-f3

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    go-f3 is Vulnerable to Cached Justification Verification Bypass

    go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vulnerability where verification results are cached without properly considering the context of the me…