Cometbft vulnerabilities
We track 2 vulnerabilities in Cometbft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 3, 2025.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest Cometbft vulnerabilities
- 7.1 High severity
cometbft: Improper Check or Handling of Exceptional Conditions
CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the `blocksync` protocol peers send their `base` and `latest` heights when they connect to a new node (`A`), which is syncing to the tip of a network. `base
- 8.2 High severity
cometbft: Missing Release of Memory after Effective Lifetime
CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures a