| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/cometbft/cometbft | ≥ 0.38.0, < 0.38.3 | 0.38.3 |
A vulnerability in CometBFT’s validation logic for VoteExtensionsEnableHeight can result in a chain halt when triggered through a governance parameter change proposal on an ABCI2 Application Chain. If a parameter change proposal including a VoteExtensionsEnableHeight modification is passed, nodes running the affected versions may panic, halting the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free