Browse CVEs

MEDIUM 5.3 CVE-2026-32322 soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban… Rs Soroban Sdk 22.0.11 / 23.5.3+ Fix from $1,6002026-03-13 HIGH 7.5 CVE-2026-29795 stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not… Stellar Xdr 25.0.1+ Fix from $1,9502026-03-06 HIGH 7.5 CVE-2026-26267 soroban-sdk is a Rust SDK for Soroban contracts. Prior to versions 22.0.10, 23.5.2, and 25.1.1, the `#[contractimpl]` macro contains a bug in how it … Rs Soroban Sdk 22.0.10 / 23.5.2+ Fix from $1,9502026-02-19 MEDIUM 5.3 CVE-2026-24889 soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and `Prng::gen_range` (for… Rs Soroban Sdk 22.0.9 / 23.5.1+ Fix from $1,6002026-01-28 HIGH 7.5 CVE-2023-46135 rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_pa… Rs Stellar Strkey 0.0.8+ Fix from $1,9502023-10-25 MEDIUM 6.5 CVE-2023-40580 Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phrase when the Freighter wallet … Freighter 5.3.1+ Fix from $1,6002023-08-25 MEDIUM 6.5 CVE-2021-32738 js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The `Utils.readChallengeTx` function used in SEP-10 Stellar W… Js Stellar Sdk 8.2.3+ Fix from $1,6002021-07-02