Go/github.com/ethereum/go-ethereum CVE-2026-22868: high, EPSS 0.63%
go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message
Action: Upgrade github.com/ethereum/go-ethereum to 1.16.8 or later.
go get github.com/ethereum/go-ethereum@v1.16.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.8 | - |
Fixed versions
| 1.16.8 |
Sources
- osv: GHSA-mq3p-rrmp-79jg
- https://github.com/ethereum/go-ethereum/security/advisories/GHSA-mq3p-rrmp-79jg
- https://nvd.nist.gov/vuln/detail/CVE-2026-22868
- https://github.com/ethereum/go-ethereum/commit/abeb78c647e354ed922726a1d719ac7bc64a07e2
- https://github.com/ethereum/go-ethereum
CVE-2026-22868 · published · modified · JSON