Skip to content
Stellar vulnerabilities
Newest
-
stellar rs-soroban-sdk
soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction
CVE-2026-32322
Fix available
5.3 Medium
-
stellar rs-soroban-poseidon
Poseidon V1 variable-length input collision via implicit zero-padding
CVE-2026-32129
Fix available
8.7 High
-
stellar stellar-xdr, rs-stellar-xdr +1 more
stellar-xdr: `StringM::from_str` bypasses max length validation
CVE-2026-29795
Fix available
4.0 Medium
-
stellar rs-soroban-sdk
rs-soroban-sdk #[contractimpl] macro calls inherent function instead of trait function when names collide
CVE-2026-26267
Fix available
7.5 High
-
stellar rs-soroban-sdk
soroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64
CVE-2026-24889
Fix available
5.3 Medium
-
stellar stellar-core
Stellar-core's Overlay - security fix for DDoS mitigation
CVE-2024-32985
5.9 Medium
-
stellar rs-stellar-strkey
Panic in SignedPayload::from_payload
CVE-2023-46135
Fix available
5.3 Medium
-
stellar freighter
Freighter mnemonic phrase may be accessed by Javascript through a private API
CVE-2023-40580
8.1 High
-
stellar js-stellar-sdk
Utils.readChallengeTx does not verify the server account signature
CVE-2021-32738
Fix available
6.5 Medium