Skip to content
OpenAdvisories

Package · Go

github.com/filecoin-project/lotus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2021-21405

    BLS Signature "Malleability"

    Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized", and "compressed", meaning that BLS signatures can be provi…

    filecoin-project lotus github.com/filecoin-project/lotus Go