input-output-hk vulnerabilities
4 published CVEs name input-output-hk among the affected products.
- Published CVEs
- 4
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2023-42449
Malicious head initialiser can extract PTs from control of Hydra scripts, leading to locked participant commits or spoofed commits
input-output-hk · hydra
High8.1 - CVE-2023-42448
Hydra's contestation period in head datum can be modified during Close transaction, allowing malicious participant to freely modify the contestation deadline
input-output-hk · hydra
High8.1 - CVE-2023-38701
Hydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone
input-output-hk · hydra
Critical9.1 - CVE-2023-42806
Snapshot signature not including HeadID will allow replay attacks
input-output-hk · hydra
Medium6.5