multiversx github.com/multiversx/mx-chain-go vulnerabilities

Latest multiversx github.com/multiversx/mx-chain-go CVEs

Newest publication first

1. CVE-2023-34458 mx-chain-go's relayed transactions always increment nonce

   Published 2023-07-13

   Medium·CVSS 5.3 EPSS 1.3%

   mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a relayed transaction, if the inner transaction failed, it would have increased the inner transaction's sender account nonce. This could have contributed to a limit...

2. CVE-2023-33964 mx-chain-go does not treat invalid transaction with wrong username correctly

   Published 2023-05-31

   High·CVSS 7.5 EPSS 0.57%

   mx-chain-go is an implementation of the MultiversX blockchain protocol written in the Go language. Metachain cannot process a cross-shard miniblock. Prior to version 1.4.16, an invalid transaction with the wrong username on metachain is not treated correctly on the metachain tran...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.