xchacha20poly1305

Jul 1, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Mar 18, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Dec 4, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Dec 20, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 6, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 6, 2024 GO-2024-3259 +2 more

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Oct 25, 2024 GO-2024-3259 +2 more

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Sep 3, 2024 GO-2024-3259 +2 more

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Aug 12, 2024 GO-2024-3112 +3 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jul 15, 2024 GO-2024-3112 +3 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jul 1, 2024 GO-2024-3112 +3 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jun 27, 2024 GO-2024-3112 +3 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Apr 27, 2024 GO-2024-2951 +4 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Mar 13, 2024 GO-2024-2951 +4 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jan 24, 2024 GO-2024-2951 +4 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jan 22, 2024

retracted

GO-2024-2951 +4 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jan 18, 2024

retracted

GO-2024-2951 +4 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 27, 2023

retracted

GO-2024-2471 +5 more

  GO-2024-2471: Chain halt panic in github.com/cometbft/cometbft

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 17, 2023

retracted

GO-2024-2471 +5 more

  GO-2024-2471: Chain halt panic in github.com/cometbft/cometbft

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Sep 12, 2023

retracted

GO-2024-2471 +5 more

  GO-2024-2471: Chain halt panic in github.com/cometbft/cometbft

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2024-3259: CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jul 14, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jun 26, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jun 5, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

May 17, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Mar 29, 2023 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Feb 3, 2025 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Dec 20, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Oct 31, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Oct 25, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Sep 3, 2024 GO-2025-3442 +1 more

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Aug 12, 2024 GO-2024-3112 +2 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jul 15, 2024 GO-2024-3112 +2 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jul 1, 2024 GO-2024-3112 +2 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jun 27, 2024 GO-2024-3112 +2 more

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Apr 27, 2024 GO-2024-2951 +3 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Mar 13, 2024 GO-2024-2951 +3 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 27, 2023 GO-2024-2951 +3 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Nov 17, 2023 GO-2024-2951 +3 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Jun 14, 2023 GO-2024-2951 +3 more

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Apr 26, 2023 GO-2023-1882 +5 more

  GO-2023-1882: Deadlock in github.com/cometbft/cometbft/consensus

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Mar 6, 2023 GO-2023-1883 +4 more

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2024-2951: Denial of service when syncing with a malicious peer in github.com/cometbft/cometbft

  GO-2024-3112: CometBFT's state syncing validator from malicious node may lead to a chain split github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Changes in this version

+ const KeySize

+ const MaxCiphertextSize

+ const MaxPlaintextSize

+ const NonceSize

+ const TagSize

+ func HChaCha20(out *[32]byte, nonce *[16]byte, key *[32]byte)

+ func New(key []byte) (cipher.AEAD, error)

Mar 1, 2023 GO-2023-1883 +2 more

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Feb 28, 2023 GO-2023-1883 +2 more

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Feb 21, 2023 GO-2023-1883 +2 more

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft

Feb 10, 2023 GO-2023-1883 +2 more

  GO-2023-1883: Denial of service via OOM in github.com/cometbft/cometbft

  GO-2025-3442: CometBFT allows a malicious peer to make node stuck in blocksync in github.com/cometbft/cometbft

  GO-2025-3443: CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts in github.com/cometbft/cometbft