Go/github.com/tendermint/tendermint CVE-2021-21271: unknown, EPSS 1.76%
Uncontrolled resource consumption during consensus in github.com/tendermint/tendermint
Action: Upgrade github.com/tendermint/tendermint to 0.34.3 or later.
go get github.com/tendermint/tendermint@v0.34.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.34.0 | 0.34.3 | - |
Fixed versions
| 0.34.3 |
Sources
- osv: GO-2022-1052
- https://github.com/tendermint/tendermint/security/advisories/GHSA-p658-8693-mhvg
- https://github.com/tendermint/tendermint/blob/v0.34.3/CHANGELOG.md#v0.34.3
- https://github.com/tendermint/tendermint/commit/a2a6852ab99e4a0f9e79f0ea8c1726e262e25c76
CVE-2021-21271 · published · modified · JSON