indy-node vulnerabilities

2 known vulnerabilities in indy-node from Hyperledger. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  indy-node: Uncontrolled Resource Consumption

  CVE-2022-31006Sep 9, 2022HyperledgerEPSS 1.16%

  indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client connections allowed by the ledger, leaving the ledger unable t

• 8.8 High severity

  Indy Node is the server portion of a distributed ledger purpose-built for decentralized…

  CVE-2022-31020Sep 6, 2022HyperledgerEPSS 2.31%

  Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request handler in Indy-Node allows an improperly authenticated attacker to remotely execute code on nodes within