Go/github.com/cometbft/cometbft: medium
CometBFT is unstability during blocksync when syncing from malicious peer
Action: Upgrade github.com/cometbft/cometbft to 0.37.7 or later.
go get github.com/cometbft/cometbft@v0.37.7go get github.com/cometbft/cometbft@v0.38.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.37.0 | 0.37.7 | - |
| 0.38.0 | 0.38.8 | - |
Fixed versions
| 0.37.7 | 0.38.8 |
Sources
- osv: GHSA-hg58-rf2h-6rr7
- https://github.com/cometbft/cometbft/security/advisories/GHSA-hg58-rf2h-6rr7
- https://github.com/cometbft/cometbft/commit/07866e11139127e415bd0339ac377b6e6a845533
- https://github.com/cometbft/cometbft/commit/8ba2e4f52d5e626e019501ba6420cc86d5de7857
- https://github.com/cometbft/cometbft
published · modified · JSON