Skip to content
OpenAdvisories

Vendor

hyperledger

16 known vulnerabilities.

Products

indy-node 4 fabric 4 besu 3 aries-cloudagent-python 1 ursa 1 besu-native 1 fabric-chaincode-java 1 fabric-ca 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-41586

    ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

    Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and exposes deSerializeChannel() which call ObjectInputStream.re…

    hyperledger fabric org.hyperledger.fabric-sdk-java:fabric-sdk-java Maven
  • Critical 9.9
    CVE-2024-21669

    Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

    Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDP-VCs), t…

    hyperledger aries-cloudagent-python aries-cloudagent PyPI
  • Critical 9.1
    CVE-2022-36025

    Incorrect Conversion between Numeric Types in Besu Ethereum Client

    Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An error in 32 bit signed and unsigned types in the calculation of available gas in the CALL operations …

    hyperledger besu org.hyperledger.besu:evm Maven