Cometbft vulnerabilities

Products

• Cometbft 3

Newest

• cometbft Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft CVE-2025-24371 Fix available 7.1 HighFebruary 3, 2025
• cometbft CometBFT PeerState JSON serialization deadlock CVE-2023-34450 Fix available 3.7 LowJuly 3, 2023
• cometbft CometBFT may duplicate transactions in the mempool's data structures CVE-2023-34451 Fix available 8.2 HighJuly 3, 2023