Vulnerabilities

TI-2026-83383 CVE-2026-62300 · GHSA-m5ph-mmg5-6w5h

Unbounded DAG pinning in Filecoin Pin can exhaust server resources

MEDIUM 62

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-30 Fixed in 1.1.1 CWE-400

TI-2026-83382 CVE-2026-58412

HIGH 69

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00228 Published 2026-10-30 Fixed in 1.1.0 CWE-863

TI-2025-37330 CVE-2025-59942 · GHSA-g99p-47x7-mq88

LOW 39

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-09-29 Fixed in 0.8.7 CWE-190

TI-2025-37329 CVE-2025-59941 · GHSA-7pq9-rf9p-wcrf

LOW 28

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00245 Published 2025-09-29 Fixed in 0.8.9 CWE-305

TI-2021-04503 CVE-2021-21405 · GHSA-4g52-pqcj-phvh

LOW 35

Lotus is an Implementation of the Filecoin protocol written in Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00976 Published 2021-04-15 Fixed in 1.5.0 CWE-347