PatchTheCVEcometbft vulnerabilities and fixes
Recent CVEs affecting cometbft, with upgrade or downgrade steps. 2 tracked.
cometbft has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-07-03. Highest priority: CVE-2023-34451 (score 54/100).
- CVE-2023-34451 HIGH 8.2 UPGRADE CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates i
- CVE-2023-34450 LOW 3.7 UPGRADE CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates i
FAQ
How do I fix cometbft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cometbft being exploited right now?
None of the tracked cometbft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cometbft CVE should I patch first?
CVE-2023-34451 currently ranks highest (54/100): CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates i.