{"action":"Upgrade github.com/cometbft/cometbft to 0.34.29 or later.","affected":[{"fixed":"0.34.29","introduced":"0.34.28"},{"fixed":"0.37.2","introduced":"0.37.1"}],"component":"github.com/cometbft/cometbft","cve_ids":["CVE-2023-34450"],"ecosystem":"Go","epss":0.00851,"exploited":false,"fixed_versions":["0.34.29","0.37.2"],"ghsa_id":"GHSA-mvj3-qrqh-cjvr","id":"tcs_01M5KFGFW1P0WV4GE2ADGY29FK","modified_at":"2026-09-10T03:50:02.573979189Z","published_at":"2023-07-05T21:33:48Z","references":["https://osv.dev/vulnerability/GHSA-mvj3-qrqh-cjvr","https://github.com/cometbft/cometbft/security/advisories/GHSA-mvj3-qrqh-cjvr","https://nvd.nist.gov/vuln/detail/CVE-2023-34450","https://github.com/cometbft/cometbft/pull/524","https://github.com/cometbft/cometbft/pull/863","https://github.com/cometbft/cometbft/pull/865","https://github.com/cometbft/cometbft"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mvj3-qrqh-cjvr","url":"https://osv.dev/vulnerability/GHSA-mvj3-qrqh-cjvr"}],"summary":"CometBFT PeerState JSON serialization deadlock"}