ethereum vulnerabilities
19 published CVEs name ethereum among the affected products.
- 19Published CVEs19 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111171
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass
ethereum · web3.py
Medium6.3 - CVE-2026-40072
web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling
ethereum · web3.py
Low1.7 - CVE-2026-26315
Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake
ethereum · go-ethereum
Medium6.9 - CVE-2026-26314
Go Ethereum affected by DoS via malicious p2p message
ethereum · go-ethereum
High8.7 - CVE-2026-26313
Go Ethereum affected by DoS via malicious p2p message
ethereum · go-ethereum
Medium6.9 - CVE-2026-22868
go-ethereum has a DoS via malicious p2p message
ethereum · go-ethereum
High7.1 - CVE-2026-22862
go-ethereum has a DoS via malicious p2p message
ethereum · go-ethereum
High7.1 - CVE-2015-20112
RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.
Ethereum · RLPx
Low3.4 - CVE-2025-24883
go-ethereum has a DoS via malicious p2p message
ethereum · go-ethereum
High8.7 - CVE-2024-32972
go-ethereum denial of service via malicious p2p message
ethereum · go-ethereum
High7.5