tocsin

Go/github.com/cometbft/cometbft: unknown

CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

Action: Upgrade github.com/cometbft/cometbft to 0.37.11 or later.

go get github.com/cometbft/cometbft@v0.37.11
go get github.com/cometbft/cometbft@v0.38.12

Affected

introducedfixedlast affected
0.37.00.37.11-
0.38.00.38.12-

Fixed versions

0.37.110.38.12

Sources

published · modified · JSON