Browse CVEs

HIGH 7.5 CVE-2026-26314 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, a vulnerable node can be forced to s… Go Ethereum 1.16.9+ Fix from $1,9502026-02-19 HIGH 7.5 CVE-2026-26315 go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptogr… Go Ethereum 1.16.9+ Fix from $1,9502026-02-19 HIGH 7.5 CVE-2026-26313 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.17.0, an attacker can cause high memory us… Go Ethereum 1.17.0+ Fix from $1,9502026-02-19 HIGH 7.5 CVE-2026-22862 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a spe… Go Ethereum 1.16.8+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2026-22868 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a spe… Go Ethereum 1.16.8+ Fix from $1,9502026-01-13 HIGH 7.5 CVE-2023-42319 Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and da… Go Ethereum after 1.13.4 Fix from $1,9502023-10-18 MEDIUM 5.3 CVE-2023-36980 An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the thresho… Blockchain Mitigation only Fix from $1,6002023-09-11 HIGH 7.5 CVE-2023-40591 go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts o… Go Ethereum 1.12.1+ Fix from $1,9502023-09-06 HIGH 7.5 CVE-2022-1930 An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbi… Eth Account 0.5.9+ Fix from $1,9502022-08-22 MEDIUM 5.9 CVE-2022-37450 Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-… Go Ethereum after 1.10.21 Fix from $1,6002022-08-05 MEDIUM 5.9 CVE-2022-29177 Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high ve… Go Ethereum 1.10.17+ Fix from $1,6002022-05-20 HIGH 7.5 CVE-2021-42219 Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of m… Go Ethereum No fix yet Fix from $1,9502022-03-17 HIGH 7.5 CVE-2022-23327 A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message… Go Ethereum after 1.10.12 Fix from $1,9502022-03-04 HIGH 7.5 CVE-2022-23328 A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all … Go Ethereum No fix yet Fix from $1,9502022-03-04 MEDIUM 5.5 CVE-2021-43668 Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered. They will crash with "runtime error:… Go Ethereum Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.7 CVE-2021-41173 Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.9, a vulnerable node is susceptible to crash when p… Go Ethereum 1.10.9+ Fix from $1,6002021-10-26 HIGH 7.5 CVE-2021-39137 go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could ca… Go Ethereum 1.10.8+ Fix from $1,9502021-08-24 MEDIUM 5.5 CVE-2020-26800 A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of s… Aleth after 1.8.0 Fix from $1,6002021-01-11 MEDIUM 6.5 CVE-2020-26264 Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerabili… Go Ethereum 1.9.25+ Fix from $1,6002020-12-11 MEDIUM 5.3 CVE-2020-26265 Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consen… Go Ethereum 1.9.20+ Fix from $1,6002020-12-11 CRITICAL 10.0 CVE-2017-14451 An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code … Ethereum Mitigation only Fix from $2,3002020-12-02 HIGH 7.5 CVE-2020-26242 Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service (… Go Ethereum 1.9.18+ Fix from $1,9502020-11-25 HIGH 7.1 CVE-2020-26241 Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.… Go Ethereum 1.9.17+ Fix from $1,9502020-11-25 HIGH 7.5 CVE-2020-26240 Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1… Go Ethereum 1.9.24+ Fix from $1,9502020-11-25 CRITICAL 9.8 CVE-2018-15890 An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/EC… Ethereumj No fix yet Fix from $2,3002019-06-20 HIGH 7.5 CVE-2018-20421 Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory… Go Ethereum No fix yet Fix from $1,9502018-12-24 HIGH 8.8 CVE-2018-18920 Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' wher… Py Evm No fix yet Fix from $1,9502018-11-12 HIGH 7.5 CVE-2018-19184 cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. Go Ethereum No fix yet Fix from $1,9502018-11-12 HIGH 7.5 CVE-2018-16733 In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block. Go Ethereum 1.8.14+ Fix from $1,9502018-09-08 HIGH 7.5 CVE-2018-12018 The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of … Go Ethereum 1.8.11+ Fix from $1,9502018-07-05