- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 25 · 7 high, 10 medium
- Registry
- pkg.go.dev
Advisories 25
- CVE-2026-26315Medium 6.9
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake
Affected: fixed in 1.16.9.
- CVE-2026-26314High 8.7
Go Ethereum affected by DoS via malicious p2p message
Affected: fixed in 1.16.9.
- CVE-2026-26313Medium 6.9
Go Ethereum affected by DoS via malicious p2p message
Affected: fixed in 1.17.0.
- CVE-2026-22868High 7.1
go-ethereum has a DoS via malicious p2p message
Affected: fixed in 1.16.8.
- CVE-2026-22862High 7.1
go-ethereum has a DoS via malicious p2p message
Affected: fixed in 1.16.8.
- CVE-2025-24883High 8.7
go-ethereum has a DoS via malicious p2p message
Affected: from 1.14.0, fixed in 1.14.13.
- CVE-2024-32972High 7.5
go-ethereum denial of service via malicious p2p message
Affected: fixed in 1.13.15.
- CVE-2023-42319High 7.5
Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory…
Affected: through 1.13.4.
- CVE-2023-40591High 7.5
Denial of service via malicious p2p message in go-ethereum
Affected: fixed in 1.12.1-stable; fixed in 1.12.1.
- CVE-2022-37450Unrated
Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a…
Affected: through 1.10.21.
- CVE-2022-29177Medium 5.9
DoS via malicious p2p message in Go-Ethereum
Affected: fixed in 1.10.17.
- CVE-2021-42219Unrated
Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive…
Affected: through 1.10.9.
- CVE-2022-23328Unrated
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one…
Affected: through 1.10.16.
- CVE-2022-23327Unrated
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in…
Affected: through 1.10.12.
- CVE-2021-43668Unrated
Go-Ethereum 1.10.9 nodes crash (denial of service) after receiving a serial of messages and cannot be recovered.
Affected: through 1.10.9.
Show all 25 advisoriesShow fewer advisories
- CVE-2021-41173Medium 5.7
DoS via maliciously crafted p2p message
Affected: fixed in 1.10.9.
- CVE-2021-39137Medium 6.5
Consensus flaw during block processing in go-ethereum
Affected: from 1.10.0, fixed in 1.10.8; fixed in 1.10.8.
- CVE-2020-26264Medium 6.5
LES Server DoS via GetProofsV2
Affected: fixed in 1.9.25.
- CVE-2020-26265Medium 5.3
Consensus flaw during block processing
Affected: from 1.9.4, fixed in 1.9.20.
- CVE-2020-26240Medium 5.3
Erroneous Proof of Work calculation in geth
Affected: fixed in 1.9.24.
- CVE-2020-26241Medium 6.5
Shallow copy bug in geth
Affected: from 1.9.7, fixed in 1.9.17.
- CVE-2020-26242Medium 6.5
Denial of service in geth
Affected: from 1.9.16, fixed in 1.9.18.
- CVE-2018-19184Unrated
cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
Affected: fixed in 1.8.14.
- CVE-2018-16733Unrated
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
Affected: fixed in 1.8.14.
- CVE-2018-12018Unrated
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation…
Affected: fixed in 1.8.11.