Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Rs Soroban Sdk MEDIUM 5.3
CVE-2026-32322

soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381 in soroban…

Fix: 22.0.11 / 23.5.3+
Fix from $1,600 2026-03-13
Stellar Xdr HIGH 7.5
CVE-2026-29795

stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not…

Fix: 25.0.1+
Fix from $1,950 2026-03-06
Rs Soroban Sdk HIGH 7.5
CVE-2026-26267

soroban-sdk is a Rust SDK for Soroban contracts. Prior to versions 22.0.10, 23.5.2, and 25.1.1, the `#[contractimpl]` macro contains a bug in how it …

Fix: 22.0.10 / 23.5.2+
Fix from $1,950 2026-02-19
Rs Soroban Sdk MEDIUM 5.3
CVE-2026-24889

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and `Prng::gen_range` (for…

Fix: 22.0.9 / 23.5.1+
Fix from $1,600 2026-01-28
Rs Stellar Strkey HIGH 7.5
CVE-2023-46135

rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially crafted payload is used.`inner_pa…

Fix: 0.0.8+
Fix from $1,950 2023-10-25
Freighter MEDIUM 6.5
CVE-2023-40580

Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phrase when the Freighter wallet …

Fix: 5.3.1+
Fix from $1,600 2023-08-25
Js Stellar Sdk MEDIUM 6.5
CVE-2021-32738

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The `Utils.readChallengeTx` function used in SEP-10 Stellar W…

Fix: 8.2.3+
Fix from $1,600 2021-07-02