Go/github.com/cometbft/cometbft: high
Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft
Action: Upgrade github.com/cometbft/cometbft to 0.38.3 or later.
go get github.com/cometbft/cometbft@v0.38.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.38.0 | 0.38.3 | - |
Fixed versions
| 0.38.3 |
Sources
- osv: GHSA-qr8r-m495-7hc4
- https://github.com/cometbft/cometbft/security/advisories/GHSA-qr8r-m495-7hc4
- https://github.com/cometbft/cometbft/commit/5fbc97378b94b0945febe9549399e7c9c5df13ed
- https://github.com/cometbft/cometbft
published · modified · JSON