Go/github.com/tendermint/tendermint CVE-2021-21271: medium 6.5, EPSS 1.76%
Tendermint Core vulnerable to Uncontrolled Resource Consumption
Action: Upgrade github.com/tendermint/tendermint to 0.34.3 or later.
go get github.com/tendermint/tendermint@v0.34.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.34.0 | 0.34.3 | - |
Fixed versions
| 0.34.3 |
Sources
- osv: GHSA-p658-8693-mhvg
- https://github.com/tendermint/tendermint/security/advisories/GHSA-p658-8693-mhvg
- https://nvd.nist.gov/vuln/detail/CVE-2021-21271
- https://github.com/tendermint/tendermint/pull/5219
- https://github.com/tendermint/tendermint/commit/a2a6852ab99e4a0f9e79f0ea8c1726e262e25c76
- https://github.com/tendermint/tendermint
- https://github.com/tendermint/tendermint/blob/v0.34.3/CHANGELOG.md#v0.34.3
- https://pkg.go.dev/vuln/GO-2022-1052
CVE-2021-21271 · published · modified · JSON