hyperledger vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20212
3. 20225
4. 20231
5. 20242
6. 20251
7. 20263

Newest CVEs

• CVE-2026-53658

  Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

  hyperledger · fabric-ca

  Medium6.3
• CVE-2026-45581

  fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode

  hyperledger · fabric-chaincode-java

  Medium5.5
• CVE-2026-41586

  ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

  hyperledger · fabric

  Critical9.3
• CVE-2025-30147

  ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve

  hyperledger · besu-native

  High8.7
• CVE-2022-31021

  Unlinkability broken in ursa when verifiers use malicious keys

  hyperledger · ursa

  Low3.3
• CVE-2024-21669

  Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

  hyperledger · aries-cloudagent-python

  Critical9.9
• CVE-2023-46132

  Crosslinking transaction attack in hyperledger/fabric

  hyperledger · fabric

  High7.1
• CVE-2022-36025

  Incorrect Conversion between Numeric Types in Besu Ethereum Client

  hyperledger · besu

  Critical9.1
• CVE-2022-31006

  Hyperledger Indy DOS vulnerability

  hyperledger · indy-node

  High7.5
• CVE-2022-31020

  Remote code execution in Indy's NODE_UPGRADE transaction

  hyperledger · indy-node

  High8.8