cometbft

Products

ProductCVEsExploitedLatest
cometbft3–Feb 3, 2025

Exploited and recent CVEs

  • CVE-2025-24371 High 7.1 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft 0.5%
  • CVE-2023-34450 Low 3.7 CometBFT PeerState JSON serialization deadlock 0.9%
  • CVE-2023-34451 High 8.2 CometBFT may duplicate transactions in the mempool's data structures 0.9%