ensdomains
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ens-contracts | 2 | – | Feb 25, 2026 |
| @ensdomains/ens | 1 | – | Jan 30, 2020 |
Exploited and recent CVEs
- CVE-2026-22866 ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation 0.2%
- CVE-2023-38698 .eth registrar controller can shorten the duration of registered names 0.8%
- CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names 1.2%