Vulnerabilities

TI-2026-38895 CVE-2026-53924

Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes

HIGH 77

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00406 Published 2026-09-03 Fixed in 0xc9d4e0dacd937364793278180551e59d93cd43f9 CWE-284

TI-2026-41381 CVE-2026-57445

Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve

MEDIUM 44

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00428 Published 2026-09-03 No fix listed CWE-703

TI-2026-40181 CVE-2026-55658

Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()

HIGH 67

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00299 Published 2026-09-03 No fix listed CWE-862

Vulnerabilities

Filters

Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes

Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve

Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()