Skip to content
OpenAdvisories

Vendor

input-output-hk

4 known vulnerabilities.

Products

hydra 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-42806

    Snapshot signature not including HeadID will allow replay attacks

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants t…

    input-output-hk hydra