Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-18921

Malicious code in bioql PyPI...

4.8CVSS6.5AI score0.00149EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/06/23 8:39 a.m.3 views

CVE-2025-48886

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

4.8CVSS7.1AI score0.00149EPSS
Exploits0References1
OSV
OSV
added 2025/06/19 2:24 p.m.2 views

CVE-2025-48886 hydra-node dangerously assumes L1 event finality and does not consider failed transactions

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

4.8CVSS6.8AI score0.00149EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/06/19 2:24 p.m.3 views

CVE-2025-48886 hydra-node dangerously assumes L1 event finality and does not consider failed transactions

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

4.8CVSS7AI score0.00149EPSS
Exploits0References3
CVE
CVE
added 2025/06/19 2:24 p.m.9 views

CVE-2025-48886

Hydra, a Layer-2 scaling solution for Cardano, is affected by a vulnerability that arises from assuming L1 finality and neglecting failed transactions. Before version 0.22.0, Hydra treated certain L1 events as finalized as soon as recognized by node participants, making those transactions targets...

4.8CVSS5.1AI score0.00149EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/06/19 2:24 p.m.5 views

CVE-2025-48886 hydra-node dangerously assumes L1 event finality and does not consider failed transactions

Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality and does not consider failed transactions. Currently, Cardano L1 is monitored for certain events which are necessary for state progression. At the moment, Hydra considers those...

4.8CVSS0.00149EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/19 12:0 a.m.2 views

PT-2025-26219 · Hydra · Hydra

Name of the Vulnerable Software and Affected Versions: Hydra versions prior to 0.22.0 Description: Hydra is a layer-two scalability solution for Cardano. The issue arises from the assumption of L1 event finality, where the system does not consider failed transactions on the Cardano L1. This makes...

4.8CVSS6.3AI score0.00149EPSS
Exploits0References8
Rows per page
Query Builder