ethereum vulnerabilities

CVEs per yearBy the year they were published

1. 20205
2. 20212
3. 20221
4. 20231
5. 20241
6. 20251
7. 20251
8. 20267

Newest CVEs

• CVE-2026-111171

  Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

  ethereum · web3.py

  Medium6.3
• CVE-2026-40072

  web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

  ethereum · web3.py

  Low1.7
• CVE-2026-26315

  Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake

  ethereum · go-ethereum

  Medium6.9
• CVE-2026-26314

  Go Ethereum affected by DoS via malicious p2p message

  ethereum · go-ethereum

  High8.7
• CVE-2026-26313

  Go Ethereum affected by DoS via malicious p2p message

  ethereum · go-ethereum

  Medium6.9
• CVE-2026-22868

  go-ethereum has a DoS via malicious p2p message

  ethereum · go-ethereum

  High7.1
• CVE-2026-22862

  go-ethereum has a DoS via malicious p2p message

  ethereum · go-ethereum

  High7.1
• CVE-2015-20112

  RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.

  Ethereum · RLPx

  Low3.4
• CVE-2025-24883

  go-ethereum has a DoS via malicious p2p message

  ethereum · go-ethereum

  High8.7
• CVE-2024-32972

  go-ethereum denial of service via malicious p2p message

  ethereum · go-ethereum

  High7.5