Design/Logic Flaw

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns...

CVE-2022-36023 Remote denial of service in Hyperledger Fabric Gateway

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the malformed gateway request and returns...

Malicious code in ledger-live-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6181eb8571a997bee121a596d871f926f1b02d4e875a57d1a3fc9025338f7a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4272 Malicious code in ledger-live-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6181eb8571a997bee121a596d871f926f1b02d4e875a57d1a3fc9025338f7a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error ...

CVE-2022-31121

Hyperledger Fabric vulnerability CVE-2022-31121 affects Fabric's orderer component. In affected versions, if a consensus client sends a malformed consensus request to an orderer, the orderer may crash. A fix was added in commit 0f1835949 that validates missing consensus messages and returns an er...

CVE-2022-31121 Improper Input Validation in fabric hyperledger

Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error ...

CVE-2022-31121 Improper Input Validation in fabric hyperledger

Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error ...

Malicious Package

Overview ledger-live-assets is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious code in azure-confidential-ledger-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f02d4f978871b6e194c6be41add4e205a8e70c5f06030d0cb9dab00e52ba19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1307 Malicious code in azure-confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990af1e5ea3a4d642497c5f273b8dcebb97f2f5b201295507b68326d1b424b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990af1e5ea3a4d642497c5f273b8dcebb97f2f5b201295507b68326d1b424b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1308 Malicious code in azure-confidential-ledger-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f02d4f978871b6e194c6be41add4e205a8e70c5f06030d0cb9dab00e52ba19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1309 Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d97436701795747d887d48afce086882c80622cab5710b5d2063411ab229921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2150 Malicious code in confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d97436701795747d887d48afce086882c80622cab5710b5d2063411ab229921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9f4c68463c1bdbbe469fe5c68d3f23d50379a0939a8f9155610ced839c30806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1674 Malicious code in brave-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9f4c68463c1bdbbe469fe5c68d3f23d50379a0939a8f9155610ced839c30806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29077

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat...