net-p2p/c-lightning -- unknown vulnerability

Core Lightning team reports: This point release includes fixes for vulnerabilities responsibly reported by a number of sources. It also comes at a time when increasingly capable AI models are being used to identify potential vulnerabilities in open-source code, significantly increasing the volume...

EUVD-2019-4573

Malware in sbrugna...

EUVD-2021-28606

Malicious code in bioql PyPI...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

Cross site request forgery (csrf)

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592

The CVE-2021-41592 vulnerability affects Blockstream c-lightning up to version 0.10.1, caused by dust HTLC exposure that can lead to loss of funds. The connected documents consistently describe the issue with this product/version but do not provide exploit details or a confirmed fix. No remediati...

CVE-2021-41592

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

CVE-2021-41592: Allocation of Resources Without Limits or Throttling

Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...

Blockstream C-Lightning 安全漏洞

Blockstream C-Lightning is a lightweight, highly customizable and standards-compliant implementation of the Lightning Network Protocol. A security vulnerability exists in Blockstream c-lightning. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or t...

c-lightning Security Vulnerabilities

A security vulnerability exists in c-lightning versions prior to 0.7.1 that stems from incorrect access control. A remote attacker could exploit the vulnerability by not paying or underpaying the total cash amount of a transaction...

CVE-2019-12998

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."...

CVE-2019-12998

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."...

Design/Logic Flaw

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."...

CVE-2019-12998

CVE-2019-12998 affects c-lightning prior to 0.7.1. The root cause is Incorrect Access Control, enabling attackers to trigger loss of funds. Public descriptions note this vulnerability across multiple feeds (NVD, OSV, CVE records). No exploitation details or patches are provided in the supplied do...

CVE-2019-12998

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."...

CVE-2019-12998: Undefined Security Weakness

c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."...