cometbft github.com/cometbft/cometbft/light vulnerabilities

Latest cometbft github.com/cometbft/cometbft/light CVEs

Newest publication first

1. GHSA-g5xx-c4hv-9ccc CometBFT's state syncing validator from malicious node may lead to a chain split

   Published 2024-09-03

   Low·CVSS 2.3

   Name: ASA-2024-009: State syncing validator from malicious node may lead to a chain split Component: CometBFT Criticality: Medium (ACMv1.2: I:Moderate; L: Possible) Affected versions: >= 0.34.0, <= 0.34.33, >=0.37.0, <= 0.37.10, >= 0.38.0, <= 0.38.11 Summary The state sync protoc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.