Vulnerabilities

TI-2022-11762 CVE-2022-29219 · GHSA-cvj7-5f3c-9vg9

Integer Overflow in Lodestar

MEDIUM 42

Lodestar is a TypeScript implementation of the Ethereum Consensus specification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01344 Published 2022-05-24 Fixed in 0.36.0 CWE-190

TI-2022-08573 CVE-2022-24759 · GHSA-j3ff-xp6c-6gcc

LOW 36

`@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00499 Published 2022-03-17 Fixed in 4.1.2, 5.0.3 CWE-347

TI-2021-07888 CVE-2021-25835 · GHSA-x5f3-qmwj-4f84

LOW 36

Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01325 Published 2021-02-08 Fixed in 0.4.1 CWE-294

TI-2021-07890 CVE-2021-25837

LOW 36

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01567 Published 2021-02-08 No fix listed

TI-2021-07889 CVE-2021-25836

LOW 35

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01275 Published 2021-02-08 No fix listed

TI-2021-07887 CVE-2021-25834 · GHSA-93p5-8fqw-wjx3

LOW 35

Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01161 Published 2021-02-08 Fixed in 0.4.1 CWE-294