Skip to main content

Filecoin

3 CVEs vendor

Monthly

CVE-2025-59942 Sep 29, 23:15 Go HIGH PATCH This Month

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Integer Overflow Suse Go F3 Filecoin
NVD GitHub
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-59941 Sep 29, 23:15 Go MEDIUM PATCH This Month

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable.

Authentication Bypass Suse Go F3 Filecoin
NVD GitHub
CVSS 3.1
5.9
EPSS
0.0%
CVE-2021-21405 Apr 15, 22:15 Go HIGH POC PATCH This Week

Lotus is an Implementation of the Filecoin protocol written in Go. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Jwt Attack Lotus Filecoin
NVD GitHub
CVSS 3.1
7.5
EPSS
1.0%
EPSS 0% CVSS 7.5
HIGH PATCH This Month

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Integer Overflow Suse +2
NVD GitHub
EPSS 0% CVSS 5.9
MEDIUM PATCH This Month

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable.

Authentication Bypass Suse Go F3 +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC PATCH This Week

Lotus is an Implementation of the Filecoin protocol written in Go. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Jwt Attack Lotus +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy