Grin

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Grin records in CISA KEV

No Grin vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Grin · all components

TI-2019-06653 CVE-2019-9195 · GHSA-v6c9-7f38-qq3j

MEDIUM 48

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03588 Published 2019-02-26 No fix listed CWE-22

TI-2020-05460 CVE-2020-6638 · GHSA-7w6p-rwhg-7h3g

LOW 36

Grin through 2.1.1 has Insufficient Validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01324 Published 2020-01-21 Fixed in 3.0.0 CWE-20

TI-2020-12516 CVE-2020-15899 · GHSA-p75g-gcv5-42qg

LOW 34

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00754 Published 2020-07-28 Fixed in 4.0.0 CWE-345

TI-2020-09951 CVE-2020-12439 · GHSA-6x52-88cq-55q5

LOW 27

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01551 Published 2020-05-05 Fixed in 3.1.0 CWE-404