pkg:Go/github.com/cometbft/cometbft

6 total CVEsHIGH2MEDIUM2

✅ Check your installed version

All known vulnerabilities

  • HIGH8.2CVE-2023-34451Denial of service via OOM in github.com/cometbft/cometbft
    from 0, < 0.34.29
  • HIGH8.2CVE-2023-34451Denial of service via OOM in github.com/cometbft/cometbft
    from 0, < 0.37.2
  • MEDIUM5.3CVE-2023-34450Deadlock in github.com/cometbft/cometbft/consensus
    >= 0.34.28, < 0.34.29
  • MEDIUM5.3CVE-2023-34450Deadlock in github.com/cometbft/cometbft/consensus
    >= 0.37.1, < 0.37.2
  • —CVE-2025-24371CometBFT allows a malicious peer to make node stuck in blocksync
    >= 1.0.0-alpha.1, < 1.0.1
  • —CVE-2025-24371CometBFT allows a malicious peer to make node stuck in blocksync
    from 0, < 0.38.17