Vulnerabilities

TI-2025-18114 CVE-2025-24371 · GHSA-22qq-3xwm-r5x4

Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

LOW 32

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00464 Published 2025-02-03 Fixed in 0.38.17, 1.0.1 CWE-703

TI-2023-17276 CVE-2023-34450 · GHSA-mvj3-qrqh-cjvr

LOW 26

CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00851 Published 2023-07-03 Fixed in 0.34.29, 0.37.2 CWE-401

TI-2023-17277 CVE-2023-34451 · GHSA-w24w-wp77-qffm

HIGH 75

CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00901 Published 2023-07-03 Fixed in 0.34.29, 0.37.2 CWE-401