filecoin-project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

filecoin-project records in CISA KEV

No filecoin-project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2026-83382 CVE-2026-58412

HIGH 69

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00228 Published 2026-10-30 Fixed in 1.1.0 CWE-863

TI-2026-83383 CVE-2026-62300 · GHSA-m5ph-mmg5-6w5h

MEDIUM 62

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-30 Fixed in 1.1.1 CWE-400

TI-2025-37330 CVE-2025-59942 · GHSA-g99p-47x7-mq88

LOW 39

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-09-29 Fixed in 0.8.7 CWE-190

TI-2021-04503 CVE-2021-21405 · GHSA-4g52-pqcj-phvh

LOW 35

Lotus is an Implementation of the Filecoin protocol written in Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00976 Published 2021-04-15 Fixed in 1.5.0 CWE-347

TI-2025-37329 CVE-2025-59941 · GHSA-7pq9-rf9p-wcrf

LOW 28

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00245 Published 2025-09-29 Fixed in 0.8.9 CWE-305