CVE Browser

Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode

ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve

Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders

CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential

Unlinkability broken in ursa when verifiers use malicious keys

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

Crosslinking transaction attack in hyperledger/fabric

Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name. NOT…

Incorrect Conversion between Numeric Types in Besu Ethereum Client

Hyperledger Indy DOS vulnerability

Remote code execution in Indy's NODE_UPGRADE transaction

Remote denial of service in Hyperledger Fabric Gateway

Improper Input Validation in fabric hyperledger

SHL, SHR, and SAR operations trigger native exception at key values in besu

Potential DoS in Besu HTTP JSON-RPC API

Authorization bypass in Hyperledger Indy

Uncontrolled Resource Consumption in Indy Node

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block valid…