Skip to content
OpenAdvisories

Vendor

ethereum

19 known vulnerabilities.

Products

go-ethereum 16 web3.py 2 RLPx 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.7
    CVE-2026-40072 Public exploit

    web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

    web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_pa…

    ethereum web3.py
  • High 7.1
    CVE-2026-22862 Public exploit

    go-ethereum has a DoS via malicious p2p message

    go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8.

    ethereum go-ethereum github.com/ethereum/go-ethereum Go