cometbft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cometbft | 3 | – | Feb 3, 2025 |
Exploited and recent CVEs
- CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft 0.5%
- CVE-2023-34450 CometBFT PeerState JSON serialization deadlock 0.9%
- CVE-2023-34451 CometBFT may duplicate transactions in the mempool's data structures 0.9%