Go/github.com/ethereum/go-ethereum CVE-2020-26240: medium 5.3, EPSS 1.86%

Erroneous Proof of Work calculation in geth

Action: Upgrade github.com/ethereum/go-ethereum to 1.9.24 or later.

go get github.com/ethereum/go-ethereum@v1.9.24

Affected

Fixed versions

Sources

• osv: GHSA-v592-xf75-856p
• https://github.com/ethereum/go-ethereum/security/advisories/GHSA-v592-xf75-856p
• https://nvd.nist.gov/vuln/detail/CVE-2020-26240
• https://github.com/ethereum/go-ethereum/pull/21793
• https://github.com/ethereum/go-ethereum/commit/d990df909d7839640143344e79356754384dcdd0
• https://blog.ethereum.org/2020/11/12/geth_security_release
• https://github.com/ethereum/go-ethereum

CVE-2020-26240 · published 2021-06-29T21:12:56Z · modified 2026-09-10T03:49:06.349442645Z · JSON