Go/github.com/tendermint/tendermint CVE-2020-15091: medium 6.5, EPSS 0.91%

Denial of Service in TenderMint

Action: Upgrade github.com/tendermint/tendermint to 0.33.6 or later.

go get github.com/tendermint/tendermint@v0.33.6

Affected

Fixed versions

Sources

• osv: GHSA-6jqj-f58p-mrw3
• https://github.com/tendermint/tendermint/security/advisories/GHSA-6jqj-f58p-mrw3
• https://nvd.nist.gov/vuln/detail/CVE-2020-15091
• https://github.com/tendermint/tendermint/issues/4926
• https://github.com/tendermint/tendermint/pull/5426
• https://github.com/tendermint/tendermint/commit/480b995a31727593f58b361af979054d17d84340
• https://github.com/tendermint/tendermint
• https://github.com/tendermint/tendermint/blob/master/CHANGELOG.md#v0336
• https://pkg.go.dev/vuln/GO-2021-0090

CVE-2020-15091 · published 2021-12-20T18:17:33Z · modified 2026-07-08T06:29:36.572560696Z · JSON