Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/btcsuite/btcd

3 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 2 high
Registry
pkg.go.dev

Advisories 3

  • btcd did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality

    Affected: fixed in 0.24.2-beta.rc1.

  • btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus…

    Affected: fixed in 0.24.0.

  • CVE-2022-44797Critical 9.8

    btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.

    Affected: fixed in 0.23.2.