Product

org.hyperledger.fabric-chaincode-java/fabric-chaincode-shim vulnerabilities

1 published CVE affecting org.hyperledger.fabric-chaincode-java/fabric-chaincode-shim, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.hyperledger.fabric-chaincode-java/fabric-chaincode-shim CVEs

Newest publication first

CVE-2026-45581 fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode
Published 2026-06-08

MediumCVSS 5.5 EPSS 0.11%

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS privat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.hyperledger.fabric-chaincode-java/fabric-chaincode-shim vulnerabilities

Latest org.hyperledger.fabric-chaincode-java/fabric-chaincode-shim CVEs

CVE-2026-45581 fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode