HHyperledger

Products

Exploited and recent CVEs

• CVE-2026-53658 Medium 6.3 Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter 0.4%
• CVE-2026-45581 Medium 5.5 fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode 0.1%
• CVE-2026-41586 Critical 9.3 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE 0.5%
• CVE-2025-30147 High 8.7 ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve 0.3%
• CVE-2022-31021 Low 3.3 Unlinkability broken in ursa when verifiers use malicious keys 0.4%
• CVE-2024-21669 Critical 9.9 Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC 0.6%
• CVE-2023-46132 High 7.1 Crosslinking transaction attack in hyperledger/fabric 0.5%
• CVE-2022-36025 Critical 9.1 Incorrect Conversion between Numeric Types in Besu Ethereum Client 1.1%
• CVE-2022-31006 High 7.5 Hyperledger Indy DOS vulnerability 1.2%
• CVE-2022-31020 High 8.8 Remote code execution in Indy's NODE_UPGRADE transaction 2.3%
• CVE-2022-36023 High 7.0 Remote denial of service in Hyperledger Fabric Gateway 1.2%
• CVE-2022-31121 High 7.5 Improper Input Validation in fabric hyperledger 2.1%
• CVE-2021-41272 High 7.5 SHL, SHR, and SAR operations trigger native exception at key values in besu 1.5%
• CVE-2021-21369 Medium 6.5 Potential DoS in Besu HTTP JSON-RPC API 1.7%
• CVE-2020-11093 High 7.5 Authorization bypass in Hyperledger Indy 1.2%
• CVE-2020-11090 High 7.5 Uncontrolled Resource Consumption in Indy Node 2.2%