VDB
Sign up

GO-2024-3259

CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

Quick fix

GO-2024-3259 — github.com/cometbft/cometbft: upgrade to the fixed version with the command below.

go get github.com/cometbft/cometbft@v0.38.15

Details

CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data in github.com/cometbft/cometbft

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cometbft/cometbft
Introduced in: 0.38.0Fixed in: 0.38.15
Fixgo get github.com/cometbft/cometbft@v0.38.15

References