Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Go Ethereum HIGH 7.5
CVE-2026-26314

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to s…

Fix: 1.16.9+
Fix from $1,950 2026-02-19
Go Ethereum HIGH 7.5
CVE-2026-26315

go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptogr…

Fix: 1.16.9+
Fix from $1,950 2026-02-19
Go Ethereum HIGH 7.5
CVE-2026-26313

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory us…

Fix: 1.17.0+
Fix from $1,950 2026-02-19
Go Ethereum HIGH 7.5
CVE-2026-22862

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a spe…

Fix: 1.16.8+
Fix from $1,950 2026-01-13
Go Ethereum HIGH 7.5
CVE-2026-22868

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a spe…

Fix: 1.16.8+
Fix from $1,950 2026-01-13
Go Ethereum HIGH 7.5
CVE-2023-42319

Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and da…

Fix: after 1.13.4
Fix from $1,950 2023-10-18
Blockchain MEDIUM 5.3
CVE-2023-36980

An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the thresho…

Mitigation only
Fix from $1,600 2023-09-11
Go Ethereum HIGH 7.5
CVE-2023-40591

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts o…

Fix: 1.12.1+
Fix from $1,950 2023-09-06
Eth Account HIGH 7.5
CVE-2022-1930

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbi…

Fix: 0.5.9+
Fix from $1,950 2022-08-22
Go Ethereum MEDIUM 5.9
CVE-2022-37450

Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-…

Fix: after 1.10.21
Fix from $1,600 2022-08-05
Go Ethereum MEDIUM 5.9
CVE-2022-29177

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high ve…

Fix: 1.10.17+
Fix from $1,600 2022-05-20
Go Ethereum HIGH 7.5
CVE-2021-42219

Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of m…

No fix yet
Fix from $1,950 2022-03-17
Go Ethereum HIGH 7.5
CVE-2022-23327

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message…

Fix: after 1.10.12
Fix from $1,950 2022-03-04
Go Ethereum HIGH 7.5
CVE-2022-23328

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all …

No fix yet
Fix from $1,950 2022-03-04
Go Ethereum MEDIUM 5.5
CVE-2021-43668

Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error:…

Mitigation only
Fix from $1,600 2021-11-18
Go Ethereum MEDIUM 5.7
CVE-2021-41173

Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when p…

Fix: 1.10.9+
Fix from $1,600 2021-10-26
Go Ethereum HIGH 7.5
CVE-2021-39137

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could ca…

Fix: 1.10.8+
Fix from $1,950 2021-08-24
Aleth MEDIUM 5.5
CVE-2020-26800

A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of s…

Fix: after 1.8.0
Fix from $1,600 2021-01-11
Go Ethereum MEDIUM 6.5
CVE-2020-26264

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerabili…

Fix: 1.9.25+
Fix from $1,600 2020-12-11
Go Ethereum MEDIUM 5.3
CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consen…

Fix: 1.9.20+
Fix from $1,600 2020-12-11
Ethereum CRITICAL 10.0
CVE-2017-14451

An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code …

Mitigation only
Fix from $2,300 2020-12-02
Go Ethereum HIGH 7.5
CVE-2020-26242

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service (…

Fix: 1.9.18+
Fix from $1,950 2020-11-25
Go Ethereum HIGH 7.1
CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.…

Fix: 1.9.17+
Fix from $1,950 2020-11-25
Go Ethereum HIGH 7.5
CVE-2020-26240

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1…

Fix: 1.9.24+
Fix from $1,950 2020-11-25
Ethereumj CRITICAL 9.8
CVE-2018-15890

An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/EC…

No fix yet
Fix from $2,300 2019-06-20
Go Ethereum HIGH 7.5
CVE-2018-20421

Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory…

No fix yet
Fix from $1,950 2018-12-24
Py Evm HIGH 8.8
CVE-2018-18920

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' wher…

No fix yet
Fix from $1,950 2018-11-12
Go Ethereum HIGH 7.5
CVE-2018-19184

cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.

No fix yet
Fix from $1,950 2018-11-12
Go Ethereum HIGH 7.5
CVE-2018-16733

In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

Fix: 1.8.14+
Fix from $1,950 2018-09-08
Go Ethereum HIGH 7.5
CVE-2018-12018

The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of …

Fix: 1.8.11+
Fix from $1,950 2018-07-05