Grin

CVE-2020-15899 Jul 28, 18:15 Cargo HIGH POC PATCH This Week

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-12439 May 05, 22:15 Cargo MEDIUM PATCH This Month

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2020-6638 Jan 21, 20:15 Cargo HIGH POC PATCH This Week

Grin through 2.1.1 has Insufficient Validation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-9195 Feb 26, 19:29 CRITICAL POC PATCH Act Now

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.