Skip to content
OpenAdvisories

Vendor

hashgraph

3 known vulnerabilities.

Products

guardian 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-22674

    Hashgraph Guardian Stored XSS via branding companyName field

    Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARD_REGISTRY role to inject malicious scripts by submitting a crafted companyName value via the brand…

    hashgraph guardian
  • Medium 5.3
    CVE-2026-45248

    Hedera Guardian Authentication Bypass Information Disclosure

    Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information. Attackers can access the endpoint without providing a…

    hashgraph guardian