Vulnerabilities in Hyperledger
15 resultsCVE-2020-11090HIGHUncontrolled Resource Consumption in Indy NodeEPSS 1.7%CVE-2022-31020HIGHRemote code execution in Indy's NODE_UPGRADE transactionEPSS 1.7%CVE-2022-31121HIGHImproper Input Validation in fabric hyperledgerEPSS 1.6%CVE-2021-21369MEDIUMPotential DoS in Besu HTTP JSON-RPC APIEPSS 1.5%CVE-2021-41272HIGHSHL, SHR, and SAR operations trigger native exception at key values in besuEPSS 1.4%CVE-2020-11093HIGHAuthorization bypass in Hyperledger IndyEPSS 0.9%CVE-2022-31006HIGHHyperledger Indy DOS vulnerabilityEPSS 0.9%CVE-2022-36023HIGHRemote denial of service in Hyperledger Fabric GatewayEPSS 0.9%CVE-2022-36025CRITICALIncorrect Conversion between Numeric Types in Besu Ethereum ClientEPSS 0.8%CVE-2024-21669CRITICALHyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VCEPSS 0.6%CVE-2023-46132HIGHCrosslinking transaction attack in hyperledger/fabricEPSS 0.5%CVE-2022-31021LOWUnlinkability broken in ursa when verifiers use malicious keysEPSS 0.4%CVE-2026-41586CRITICALObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCEEPSS 0.4%CVE-2025-30147HIGHALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curveEPSS 0.2%CVE-2026-45581MEDIUMfabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service ModeEPSS 0.1%