github.com/CometBFT/cometbft
Security Advisories for github.com/CometBFT/cometbft in go
High
7 months ago
CometBFT has inconsistencies between how commit signatures are verified and how block time is derived
go
github.com/cometbft/cometbft
High
10 months ago
CometBFT's invalid BitArray handling can lead to network halt
go
github.com/cometbft/cometbft
High
over 1 year ago
CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts
go
github.com/cometbft/cometbft
Moderate
over 1 year ago
CometBFT allows a malicious peer to make node stuck in blocksync
go
github.com/cometbft/cometbft
High
almost 2 years ago
CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data
go
github.com/cometbft/cometbft
Potential
Low
almost 2 years ago
CometBFT's state syncing validator from malicious node may lead to a chain split
go
github.com/cometbft/cometbft/light
Moderate
about 2 years ago
CometBFT is unstability during blocksync when syncing from malicious peer
go
github.com/cometbft/cometbft
Low
over 2 years ago
ASA-2024-004: Default configuration param for Evidence may limit window of validity
go
github.com/cometbft/cometbft
High
over 2 years ago
Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft
go
github.com/cometbft/cometbft
Low
almost 3 years ago
CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation
go
github.com/cometbft/cometbft
High
about 3 years ago
CometBFT may duplicate transactions in the mempool's data structures
go
github.com/cometbft/cometbft
Moderate
about 3 years ago
CometBFT PeerState JSON serialization deadlock
go
github.com/cometbft/cometbft