CyberSecBulletin

Input-output-hk vulnerabilities

We track 3 vulnerabilities in Input-output-hk products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2023.

3vulnerabilities
1critical
2high
0exploited
8.4average CVSS score

Latest Input-output-hk vulnerabilities

  • 8.1 High severity

    Hydra is the two-layer scalability solution for Cardano.

    CVE-2023-42449Input-output-hkEPSS 1.13%

    Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs for the head they are initializing due to incorrect data validation logic in the head token minting pol

  • 8.1 High severity

    hydra: Improper Validation of Specified Quantity in Input

    CVE-2023-42448Input-output-hk

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum of the UTxO at the head validator must stay unchanged as the state progresses from Open to Closed (Close transa

  • 9.1 Critical severity

    Hydra is the layer-two scalability solution for Cardano.

    CVE-2023-38701Input-output-hkEPSS 1.13%

    Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head first to the `commit` validator, where they remain until they are either collected into the `head` validator or the