CyberSecBulletin

ChainSafe vulnerabilities

We track 2 vulnerabilities in ChainSafe products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest ChainSafe vulnerabilities

  • 7.5 High severity

    lodestar: Integer Overflow or Wraparound

    CVE-2022-29219ChainSafeEPSS 1.34%

    Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given maliciously-crafted `AttesterSlashing` or `ProposerSlashing` being included on-chain. Because the developers rep

  • 7.4 High severity

    js-libp2p-noise: Improper Verification of Cryptographic Signature

    CVE-2022-24759ChainSafe

    `@chainsafe/libp2p-noise` contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. `@chainsafe/libp2p-noise` before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in