400 matches found
EUVD-2025-201819
Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference affecting VerifyVoteExtension and vote verification functions. An attacker can cause intermittent validator panics and disrupt consensus operations by submitting a VoteExtension message with the blockhash field...
Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers
Summary A vulnerability exists in Babylon’s BLS vote extension processing where a malicious active validator can submit a VoteExtension with the blockhash field omitted from the protobuf serialization. Because protobuf fields are optional, unmarshalling succeeds but leaves BlockHash as nil. Babyl...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unknown fields that aren't checked. An attacker can disrupt consensus and cause all block proposals to be rejected by submitting specially crafted vote extensions with...
Improper Handling of Syntactically Invalid Structure
Overview github.com/cometbft/cometbft/consensus is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Affected versions of this package are vulnerable to Improper Handling of...
EUVD-2021-2140
Malware in sbrugna...
EUVD-2019-0765
Malware in sbrugna...
EUVD-2021-1427
Malware in sbrugna...
EUVD-2019-0725
Malware in sbrugna...
EUVD-2021-1653
Malware in sbrugna...
EUVD-2021-1275
Malware in sbrugna...
EUVD-2022-3638
Malicious code in bioql PyPI...
EUVD-2021-29722
Malicious code in bioql PyPI...
EUVD-2025-13881
Malicious code in bioql PyPI...
EUVD-2021-29724
Malicious code in bioql PyPI...
EUVD-2022-7121
Malicious code in bioql PyPI...