spacemeshos vulnerabilities

Products

• github.com/spacemeshos/api 1
• github.com/spacemeshos/api/release/go 1
• github.com/spacemeshos/go-spacemesh 1

Latest spacemeshos CVEs

Newest publication first

1. CVE-2024-34360 Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX

   Published 2024-05-10

   High·CVSS 8.2 EPSS 0.73%

   go-spacemesh is a Go implementation of the Spacemesh protocol full node. Nodes can publish activations transactions (ATXs) which reference the incorrect previous ATX of the Smesher that created the ATX. ATXs are expected to form a single chain from the newest to the first ATX eve...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.