Skip to content
OpenAdvisories

Vendor

ChainSafe

2 known vulnerabilities.

Products

lodestar 1 js-libp2p-noise 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2022-29219

    Integer Overflow in Lodestar

    Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given maliciously-crafted `AttesterSlashing` or `ProposerSlashing` being included on-chain. Because the developers re…

    ChainSafe lodestar @chainsafe/lodestar npm
  • High 8.1
    CVE-2022-24759

    Failure to validate signature during handshake in @chainsafe/libp2p-noise

    `@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-i…

    ChainSafe js-libp2p-noise @chainsafe/libp2p-noise npm