CVE-2023-36184

HIGH 7.5CVE-2023-36184 · Published 08/09/2023 · updated 17/06/2026

In short

CVE-2023-36184 is a HIGH (CVSS 7.5) vulnerability affecting aptos (aptosfoundation), sui (mystenlabs).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.6% of all vulnerabilities.
Fix: update to 1.4.3, 1.2.1 or later.

Package	Affected versions	Patched versions
aptos aptosfoundation	`< 1.4.3`	`1.4.3`
sui mystenlabs	`< 1.2.1`	`1.2.1`

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.