Read the docs

Internet Computer

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Internet Computer records in CISA KEV

No Internet Computer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 49

Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00882 Published 2024-02-21 Fixed in v1.0.1, 1.0.1 CWE-321
Priority MEDIUM 41

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01212 Published 2023-12-08 Fixed in 0.9.10 CWE-1288
Priority MEDIUM 40

When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00693 Published 2024-09-05 Fixed in 0.8.2, 0.9.3 +8 CWE-401
Open these records in search →