CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: mongo-tools, terraform-provider-grafana-fips, kubectx, crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pvc-autoresizer, k8s-agents-operator-fips, cloudprober, terraform-provider-tls-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongo-tools, terraform-provider-grafana-fips, kubectx, crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pvc-autoresizer, k8s-agents-operator-fips, cloudprober, terraform-provider-tls-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mongo-tools, terraform-provider-grafana-fips, crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pvc-autoresizer, k8s-agents-operator-fips, cloudprober, terraform-provider-tls-fips,...

SUSE CVE-2026-22868

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

CVE-2026-22862

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

CVE-2026-22862: Improper Input Validation

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

CVE-2026-22868: Improper Input Validation

go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.16.8...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

GHSA-FJ2X-735W-74VQ vulnerabilities

Vulnerabilities for packages: op-geth...

EUVD-2021-1389

Malware in sbrugna...

EUVD-2021-1406

Malware in sbrugna...

EUVD-2021-1427

Malware in sbrugna...

EUVD-2021-1345

Malware in sbrugna...

EUVD-2023-2566

Malicious code in bioql PyPI...

EUVD-2023-2817

Malicious code in bioql PyPI...

CVE-2023-42319

Geth aka go-ethereum through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service memory consumption and daemon hang via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint is not designed to withstand attacks by hostile client...

CVE-2022-23328

A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and th...

CVE-2020-26265

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade...

CVE-2020-26264

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly...

Go Ethereum vulnerable to DoS via malicious p2p message

Impact A vulnerable node can be forced to shutdown/crash using a specially crafted message. During the peer-to-peer connection handshake, a shared secret key is computed. The implementation did not verify whether the EC public key provided by the remote party is a valid point on the secp256k1...