filecoin-project

Products

ProductCVEsExploitedLatest
filecoin-pin2–Oct 30, 2026
go-f32–Sep 29, 2025
lotus1–Apr 15, 2021

Exploited and recent CVEs

  • CVE-2026-62300 Medium 6.5 Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources 0.2%
  • CVE-2026-58412 High 8.2 Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow 0.2%
  • CVE-2025-59942 High 7.5 go-f3 module vulnerable to integer overflow leading to panic 0.3%
  • CVE-2025-59941 Medium 5.9 go-f3 is Vulnerable to Cached Justification Verification Bypass 0.2%
  • CVE-2021-21405 Medium 5.9 BLS Signature "Malleability" 1.0%