hydra vulnerabilities

1 known vulnerability in hydra from Cardano-scaling. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  hydra: Missing Authorization

  CVE-2026-62162Oct 30, 2026Cardano-scaling

  Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the attacker-controlled `redeemer.currencySymbol` and that the transaction is valid befor