Skip to content
OpenAdvisories

Vendor

ensdomains

3 known vulnerabilities.

Products

ens-contracts 2 @ensdomains/ens 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-22866

    ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

    Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. In versions 1.6.2 and prior, the `RSASHA256Algorithm` and `RSASHA1Algorithm` contracts fail to validate PKCS#1 v1.5 padding structure when verif…

    ensdomains ens-contracts @ensdomains/ens-contracts npm