Vulnerabilities

TI-2026-30139 CVE-2026-41586 · GHSA-prf8-cf2x-rhx7

ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

HIGH 81

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0053 Published 2026-05-07 No fix listed CWE-502

TI-2024-30320 CVE-2024-45244 · GHSA-48gg-32q2-4r6m

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has…

LOW 31

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00589 Published 2024-08-25 No fix listed CWE-294

TI-2023-24774 CVE-2023-46132 · GHSA-v9w2-543f-h69m

Crosslinking transaction attack in hyperledger/fabric

LOW 32

Hyperledger Fabric is an open source permissioned distributed ledger framework.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00519 Published 2023-11-14 Fixed in 2.2.14, 2.5.5 CWE-362

TI-2022-22261 CVE-2022-45196 · GHSA-wp68-67c6-87fh

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by…

LOW 34

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00867 Published 2022-11-12 No fix listed CWE-670

TI-2022-16448 CVE-2022-36023 · GHSA-qj6r-fhrc-jj5r

Remote denial of service in Hyperledger Fabric Gateway

LOW 33

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.01159 Published 2022-08-18 Fixed in 2.4.6 CWE-20

TI-2022-13165 CVE-2022-31121 · GHSA-72x4-cq6r-jp4p

Improper Input Validation in fabric hyperledger

MEDIUM 43

Hyperledger Fabric is a permissioned distributed ledger framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02136 Published 2022-07-07 Fixed in 2.2.7, 2.4.5 CWE-20