Read the docs

ethereum

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

ethereum records in CISA KEV

No ethereum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Go Ethereum 24 records HIGH Cpp-ethereum 7 records LOW Aleth 2 records LOW Blockchain 1 record LOW Eth-account 1 record LOW Ethereum 1 record MEDIUM Ethereum Virtual Machine 1 record LOW Ethereumj 1 record MEDIUM

Records

1 record in Eth-account · all components

TI-2022-01789 CVE-2022-1930 · GHSA-v65g-f3cj-fjp4

ReDoS in eth-account encode_structured_data function

Priority LOW 35

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2022-08-22 Fixed in 0.5.9 CWE-1333
Open these records in search →