CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

Mô tả

Tham khảo

• cometbft/cometbft security advisory · ADVISORY
• cometbft/cometbft commit 3937e00 · FIX
• cometbft/cometbft commit 52c00a5 · FIX

Lỗ hổng khác của github.com/cometbft/cometbft

• GO-2026-4361Inconsistencies between how commit signatures are verified and how block time is derived in github.com/cometbft/cometbft
• GHSA-c32p-wcqj-j677CAOCometBFT has inconsistencies between how commit signatures are verified and how block time is derived
• GO-2025-4025CometBFT's invalid BitArray handling can lead to network halt in github.com/cometbft/cometbft
• GHSA-hrhf-2vcr-ghchCAOCometBFT's invalid BitArray handling can lead to network halt
• GO-2025-3443CometBFT allows a malicious peer to stall network by disseminating valid-looking block parts in github.com/cometbft/cometbft