GO-2025-3803 Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk...

Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

MAL-2025-6128 Malicious code in splice-pulumi-common-validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14575bc2da7a355de468310839aa06cea1b89f21b60553520aacc0b5cd693ef Any computer that has this package installed or running should be considered...

Malicious code in sha256-validator-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 453f997676ddfb37b97659a39bdc5de8d8c2fc1b070f5feeda72545030850113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5998 Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6003 Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5944 Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

hibernate-validator: Hibernate Validator Expression Language Injection

A flaw was found in Hibernate Validator. This vulnerability allows unauthorized access to sensitive information or the execution of arbitrary Java code by interpolating user-supplied input in a constraint violation message with an Expression Language...

hibernate-validator: Hibernate Validator Expression Language Injection

A flaw was found in Hibernate Validator. This vulnerability allows unauthorized access to sensitive information or the execution of arbitrary Java code by interpolating user-supplied input in a constraint violation message with an Expression Language...

hibernate-validator: Hibernate Validator Expression Language Injection

A flaw was found in Hibernate Validator. This vulnerability allows unauthorized access to sensitive information or the execution of arbitrary Java code by interpolating user-supplied input in a constraint violation message with an Expression Language...

hibernate-validator: Hibernate Validator Expression Language Injection

A flaw was found in Hibernate Validator. This vulnerability allows unauthorized access to sensitive information or the execution of arbitrary Java code by interpolating user-supplied input in a constraint violation message with an Expression Language...

Denial Of Service (DoS)

github.com/babylonlabs-io/babylon is vulnerable to Denial Of Service DoS. The vulnerability is due to sending a message that modifies the validator set exactly at the epoch boundary, which allows an attacker to halt the blockchain by disrupting consensus progression...

Integer Overflow

github.com/cosmos/cosmos-sdk is vulnerable to Integer Overflow. The vulnerability is due to a malicious validator being able to deposit values that trigger an overflow in the Validator Rewards pool, potentially halting the blockchain...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via DepositValidatorRewardsPool. An attacker can cause a chain halt by introducing an overflow condition through a crafted malicious deposit into the Validator Rewards pool when full. Details Denial of...

GHSA-P22H-3M2V-CMGH Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

Description Name: ISA-2025-005: Integer Overflow in Cosmos SDK Component: CosmosSDK Criticality: High Considerable Impact; Likely Likelihood per ACMv1.2 Affected versions: = v0.50.13, = 0.53.2 Affected users: Validators, Full nodes, Users on chains that utilize the distribution module Cosmos SDK...

Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

Description Name: ISA-2025-005: Integer Overflow in Cosmos SDK Component: CosmosSDK Criticality: High Considerable Impact; Likely Likelihood per ACMv1.2 Affected versions: = v0.50.13, = 0.53.2 Affected users: Validators, Full nodes, Users on chains that utilize the distribution module Cosmos SDK...

Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary

Summary Sending a message that modifies the validator set at the epoch boundary halts the chain. Impact Denial of Service - Comos-sdk prevents modifying the validator set from two different modules - https://github.com/cosmos/cosmos-sdk/blob/release/v0.50.x/types/module/module.goL811. Such an...