2 matches found
CVE-2019-12998
c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."
CVE-2021-41592
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.