57 matches found
EUVD-2026-117807
BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND Lightning Network Daemon node. Attackers can use the exposed macaroon to gain full contro...
CVE-2026-119757
BTCPay Server versions before 2.4.2 , including release candidates, are vulnerable to an information disclosure vulnerability. This flaw allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. By obtaining these exposed credential...
chanleakcheck
chanleakcheck This a tool to check if your lnd node was targeted by CVE-2019-12999, which was recently fully disclosed on. The tool will check if your node accepted an invalid channel, as well as attempt to quantify the total amount of lost coins, if any. Note that this tool is only for lnd,...
ln-upgrade-dynamics
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023–2026 Saurabh Kumar, Bitcoin Data Labs Paper: arXiv:2610.30350 HTML, PDF · DOI 10.48550/arXiv.2610.30350 · Bitcoin Data Labs research. Builds on Does Client Diversity Protect the Lightning Network? arXiv:2610.20952, whi...
Who Patches the Lightning Network? Evidence from Release Lines in Gossip, 2023-2026
Every implementation of Bitcoin's Lightning payment network disclosed security vulnerabilities in 2026, and every advisory told operators to upgrade. Whether they do has never been measured, because Lightning gossip carries no software version. Matching the feature bits a node announces against t...
EUVD-2020-19426
Malware in sbrugna...
EUVD-2020-19425
Malware in sbrugna...
EUVD-2021-28607
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-44797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking. CVE-2022-44797 Note...
CVE-2022-44797
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...
CVE-2024-38359 Lightning Network Daemon Onion Bomb
The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...
CVE-2024-38359 Lightning Network Daemon Onion Bomb
The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...
CVE-2024-38359
The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...
CVE-2024-38359: Improper Input Validation
The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...
Witness Block Parsing DoS Vulnerability
Impact All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments and forward HTLCs, and close out channels. Opening channels is prohibited, and also on...
GHSA-HC82-W9V8-83PR Witness Block Parsing DoS Vulnerability
Impact All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments and forward HTLCs, and close out channels. Opening channels is prohibited, and also on...
CVE-2022-39389
Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...
Design/Logic Flaw
Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...
CVE-2022-39389: Improper Input Validation
Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...
CVE-2022-39389
CVE-2022-39389 (lnd) affects Lightning Network Daemon (lnd) prior to v0.15.4. The vulnerability is a block parsing bug that can cause a node to enter a degraded state after processing certain blocks. In this state, a node can still forward HTLCs and make payments but cannot open channels, and on-...