Skip to content
OpenAdvisories

Vendor

ethereum

19 known vulnerabilities.

Products

go-ethereum 16 web3.py 2 RLPx 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.7
    CVE-2026-40072 Public exploit

    web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

    web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_pa…

    ethereum web3.py
  • Low 3.4
    CVE-2015-20112

    RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.

    ethereum RLPx