Skip to content
OpenAdvisories

Vendor

cometbft

3 known vulnerabilities.

Products

cometbft 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-24371

    Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

    CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the `blocksync` protocol peers send their `base` and `latest` heights when they connect to a new node (`A`), which is syncing to the tip of a network. `bas…

    cometbft cometbft github.com/cometbft/cometbft Go
  • High 8.2
    CVE-2023-34451

    CometBFT may duplicate transactions in the mempool's data structures

    CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures …

    cometbft cometbft github.com/cometbft/cometbft Go