<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: elrond</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-46173: Elrond-GO is a go implementation for the Elrond Network protocol</title><link>https://patchthecve.com/cve/CVE-2022-46173.html</link><guid>https://patchthecve.com/cve/CVE-2022-46173.html</guid><pubDate>Wed, 17 Jun 2026 05:11:21 +0000</pubDate><description>HIGH 7.2: Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between the </description></item><item><title>CVE-2022-36061: Elrond go is the go implementation for the Elrond Network protocol</title><link>https://patchthecve.com/cve/CVE-2022-36061.html</link><guid>https://patchthecve.com/cve/CVE-2022-36061.html</guid><pubDate>Wed, 17 Jun 2026 04:52:50 +0000</pubDate><description>MEDIUM 6.5: Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract&#x27;s B state</description></item><item><title>CVE-2022-36058: Elrond go is the go implementation for the Elrond Network protocol</title><link>https://patchthecve.com/cve/CVE-2022-36058.html</link><guid>https://patchthecve.com/cve/CVE-2022-36058.html</guid><pubDate>Wed, 17 Jun 2026 04:52:49 +0000</pubDate><description>HIGH 7.5: Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-go to process blocks (historical or actual) could encounter a `MultiESDTNFTTransfer` transaction like this: `MultiESDTNFTTransfer` with a missing function name. Basic functionality</description></item></channel></rss>