Skip to content
OpenAdvisories

Vendor

hyperledger

16 known vulnerabilities.

Products

indy-node 4 fabric 4 besu 3 aries-cloudagent-python 1 ursa 1 besu-native 1 fabric-chaincode-java 1 fabric-ca 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-53658

    Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

    Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilte…

    hyperledger fabric-ca github.com/hyperledger/fabric-ca Go
  • Medium 5.5
    CVE-2026-45581

    fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode

    fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging in…

    hyperledger fabric-chaincode-java org.hyperledger.fabric-chaincode-java:fabric-chaincode-shim Maven
  • Medium 6.5
    CVE-2021-21369

    Potential DoS in Besu HTTP JSON-RPC API

    Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for th…

    hyperledger besu