cometbft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

cometbft records in CISA KEV

No cometbft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-17277 CVE-2023-34451 · GHSA-w24w-wp77-qffm

HIGH 75

CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00901 Published 2023-07-03 Fixed in 0.34.29, 0.37.2 CWE-401

TI-2025-18114 CVE-2025-24371 · GHSA-22qq-3xwm-r5x4

LOW 32

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00464 Published 2025-02-03 Fixed in 0.38.17, 1.0.1 CWE-703

TI-2023-17276 CVE-2023-34450 · GHSA-mvj3-qrqh-cjvr

LOW 26

CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00851 Published 2023-07-03 Fixed in 0.34.29, 0.37.2 CWE-401