Skip to content
OpenAdvisories

Package · Go

github.com/tendermint/tendermint

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-f3w5-v9xx-rp8p

    Signature verification failure in Tendermint

    _The root cause of this security vulnerability is in the Tendermint specification, and this advisory is a duplicate of https://github.com/tendermint/spec/security/advisories/GHSA-jqfc-687g-59pw._ ### Impact Tendermint light clients running versions 0.34.0 to …

    github.com/tendermint/tendermint Go
  • Medium 6.5
    CVE-2021-21271

    Denial of service in TenderMint Core

    Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evi…

    tendermint tendermint github.com/tendermint/tendermint Go
  • Medium 6.5
    CVE-2020-15091

    Denial of Service in TenderMint

    TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it (**without changing chainID**). A malicious b…

    tendermint tendermint github.com/tendermint/tendermint Go