CVE-2022-23507

3 advisories.

crates.io/tendermint-light-client-verifier CVE-2022-23507: medium 5.4, EPSS 0.32%

Tendermint light client verification not taking into account chain ID

Action: Upgrade tendermint-light-client-verifier to 0.28.0 or later.

cargo update -p tendermint-light-client-verifier --precise 0.28.0

introduced	fixed	last affected
0	0.28.0	-

0.28.0

CVE-2022-23507 · published 2022-12-14T21:35:24Z · modified 2023-11-08T04:08:19.879804Z · JSON

Tendermint light client verification not taking into account chain ID

Action: Upgrade tendermint-light-client to 0.28.0 or later.

cargo update -p tendermint-light-client --precise 0.28.0

introduced	fixed	last affected
0	0.28.0	-

0.28.0

CVE-2022-23507 · published 2022-12-14T21:35:24Z · modified 2023-11-08T04:08:19.879804Z · JSON

Tendermint light client verification not taking into account chain ID

Action: Upgrade tendermint-light-client-js to 0.28.0 or later.

cargo update -p tendermint-light-client-js --precise 0.28.0

introduced	fixed	last affected
0	0.28.0	-

0.28.0

CVE-2022-23507 · published 2022-12-14T21:35:24Z · modified 2023-11-08T04:08:19.879804Z · JSON