Hyperledger - vulnerabilities (CVEs)

21 CVEs in 11 products, 0 in the last 30 days, newest from 2026-09-15.

Products

Fabric - 6 CVEs
Besu - 3 CVEs
Indy-node - 3 CVEs
Ursa - 3 CVEs
Aries-cloudagent-python - 1 CVEs
Aries Cloud Agent - 1 CVEs
Besu-native - 1 CVEs
Fabric-ca - 1 CVEs
Fabric-chaincode-java - 1 CVEs
Indy Node - 1 CVEs
Iroha - 1 CVEs

Newest CVEs of Hyperledger

CVE-2026-53658 - CVSS 6.3 (medium), 2026-09-15: Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in…
CVE-2026-45581 - CVSS 5.5 (medium), 2026-06-08: fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is…
CVE-2026-41586 - CVSS 9.8 (critical), 2026-05-07: Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26,…
CVE-2025-30147 - CVSS 8.7 (high), 2025-05-07: Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1…
CVE-2024-45244 - CVSS 5.3 (medium), 2024-08-25: Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
CVE-2024-22192 - CVSS 6.5 (medium), 2024-01-16: Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could…
CVE-2024-21670 - CVSS 8.1 (high), 2024-01-16: Ursa is a cryptographic library for use with blockchains. The revocation schema that is part of the Ursa CL-Signatures implementations has a flaw that could…
CVE-2022-31021 - CVSS 5.3 (medium), 2024-01-16: Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and…
CVE-2024-21669 - CVSS 9.9 (critical), 2024-01-11: Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile…
CVE-2023-46132 - CVSS 7.1 (high), 2023-11-14: Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a…
CVE-2022-45196 - CVSS 7.5 (high), 2022-11-12: Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the same Channel name.…
CVE-2022-36025 - CVSS 9.1 (critical), 2022-09-24: Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Types. An…
CVE-2022-31006 - CVSS 7.5 (high), 2022-09-09: indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an…
CVE-2022-31020 - CVSS 8.8 (high), 2022-09-06: Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request…
CVE-2022-36023 - CVSS 7 (high), 2022-08-18: Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application…
CVE-2022-31121 - CVSS 7.5 (high), 2022-07-07: Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an…
CVE-2021-41272 - CVSS 7.5 (high), 2021-12-13: Besu is an Ethereum client written in Java. Starting in version 21.10.0, changes in the implementation of the SHL, SHR, and SAR operations resulted in the…
CVE-2021-21369 - CVSS 6.5 (medium), 2021-03-09: Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service…
CVE-2020-11093 - CVSS 7.5 (high), 2020-12-24: Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there…
CVE-2020-11090 - CVSS 7.5 (high), 2020-06-11: In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed…
CVE-2018-3756 - CVSS 7.5 (high), 2018-06-01: Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block…