@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0)

@lodestar/reqresp NPM version =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.25.0-rc.0 Source cves: unknown CVE Source advisory: OSV:GHSA-M9C9-MC2H-9WJW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0)

@lodestar/reqresp NPM version =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.25.0-rc.0 Source cves: unknown CVE Source advisory: GHSA-M9C9-MC2H-9WJW...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0)

@lodestar/reqresp NPM version =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.25.0-rc.0 Source cves: unknown CVE Source advisory: GHSA-53RV-HCVM-RPP9...

@chainsafe/lodestar (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0), @lodestar/beacon-node (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0) potentially affected by unknown CVE via @lodestar/reqresp (>=1.3.0-dev.0564bc1581, <=1.25.0-rc.0)

@lodestar/reqresp NPM version =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.3.0-dev.0564bc1581, =1.25.0-rc.0 Source cves: unknown CVE Source advisory: OSV:GHSA-53RV-HCVM-RPP9...

Denial Of Service (DoS)

@chainsafe/lodestar is vulnerable to denial of service. The vulnerability exists because the library uses the uint64 values as native javascript numbers, allowing an attacker to crash the application by providing large uint64 values greater than 2^53 through the maliciously-crafted AttesterSlashi...

@chainsafe/lodestar-cli (>=0.12.0, <=0.28.2-dev.18) potentially affected by CVE-2022-29219 via @chainsafe/lodestar (>=0.12.0, <=0.28.2-dev.18)

@chainsafe/lodestar NPM version =0.12.0, =0.12.0, =0.28.2-dev.18 Source cves: CVE-2022-29219 Source advisory: GHSA-CVJ7-5F3C-9VG9...

@chainsafe/lodestar-cli (>=0.12.0, <=0.28.2-dev.18) potentially affected by CVE-2022-29219 via @chainsafe/lodestar (>=0.12.0, <=0.28.2-dev.18)

@chainsafe/lodestar NPM version =0.12.0, =0.12.0, =0.28.2-dev.18 Source cves: CVE-2022-29219 Source advisory: MEND:CVE-2022-29219...

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...

@chainsafe/lodestar (>=0.28.2-dev.9, <=0.29.3-dev.5), @chainsafe/lodestar-cli (>=0.28.2-dev.0, <=0.28.2-dev.18) potentially affected by CVE-2022-24759 via @chainsafe/libp2p-noise (4.1.0)

@chainsafe/libp2p-noise NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @chainsafe/libp2p-noise and may be impacted: - @chainsafe/lodestar =0.28.2-dev.9, =0.28.2-dev.0, =0.28.2-dev.18 Source cves: CVE-2022-24759 Source advisory:...