CyberSecBulletin

Cashu vulnerabilities

We track 1 vulnerability in Cashu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2025.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Cashu vulnerabilities

  • 9.1 Critical severity

    Nutshell: Improper Validation of Specified Quantity in Input

    CVE-2025-65548Cashu

    NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill