Description
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ethereum | go-ethereum | >= 1.10.0, < 1.10.8 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/ethereum/go-ethereum | >= 1.10.0, < 1.10.8 | 1.10.8 | GHSA-9856-9gg9-qcmq |
| Go | github.com/ethereum/go-ethereum | < 1.10.8 | 1.10.8 | GO-2022-0254 |