NethermindEth github.com/NethermindEth/juno vulnerabilities

Latest NethermindEth github.com/NethermindEth/juno CVEs

Newest publication first

1. CVE-2025-29072 Nethermind Juno Potential Denial of Service (DoS) via Integer Overflow

   Published 2025-03-27

   High·CVSS 7.5 EPSS 0.49%

   An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop (and high CPU usage) by submitting a malicious Declare v2/v3 transaction....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.