Vulnerabilities in stellar
9 resultsCVE-2023-46135MEDIUMPanic in SignedPayload::from_payloadEPSS 0.8%CVE-2023-40580HIGHFreighter mnemonic phrase may be accessed by Javascript through a private APIEPSS 0.6%CVE-2021-32738MEDIUMUtils.readChallengeTx does not verify the server account signatureEPSS 0.5%CVE-2024-32985MEDIUMStellar-core's Overlay - security fix for DDoS mitigationEPSS 0.4%CVE-2026-24889MEDIUMsoroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64EPSS 0.4%CVE-2026-26267HIGHrs-soroban-sdk #[contractimpl] macro calls inherent function instead of trait function when names collideEPSS 0.3%CVE-2026-32322MEDIUMsoroban-sdk: `Fr` scalar field equality comparison bypasses modular reductionEPSS 0.3%CVE-2026-32129HIGHPoseidon V1 variable-length input collision via implicit zero-paddingEPSS 0.2%CVE-2026-29795MEDIUMstellar-xdr: `StringM::from_str` bypasses max length validationEPSS 0.2%