What’s Vulnerable › Products

ethereum go-ethereum vulnerabilities

26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ethereum go-ethereum version is affected

Latest ethereum go-ethereum vulnerabilities

• CVE-2026-26315 — Go Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake (CVSS 7.5)
• CVE-2026-26314 — Go Ethereum affected by DoS via malicious p2p message (CVSS 7.5)
• CVE-2026-26313 — Go Ethereum affected by DoS via malicious p2p message (CVSS 7.5)
• CVE-2026-22868 — go-ethereum has a DoS via malicious p2p message (CVSS 7.5)
• CVE-2026-22862 — go-ethereum has a DoS via malicious p2p message (CVSS 7.5)
• CVE-2025-24883 — go-ethereum has a DoS via malicious p2p message (CVSS 8.7)
• CVE-2024-32972 — go-ethereum denial of service via malicious p2p message (CVSS 7.5)
• CVE-2023-42319 — (CVSS 7.5)
• CVE-2023-40591 — Denial of service via malicious p2p message in go-ethereum (CVSS 7.5)
• CVE-2022-37450 — (CVSS 5.9)
• CVE-2022-29177 — DoS via malicious p2p message in Go-Ethereum (CVSS 5.9)
• CVE-2021-42219 — (CVSS 7.5)
• CVE-2022-23328 — (CVSS 7.5)
• CVE-2022-23327 — (CVSS 7.5)
• CVE-2021-43668 — (CVSS 5.5)
• CVE-2021-41173 — DoS via maliciously crafted p2p message (CVSS 3.5)
• CVE-2021-39137 — Consensus flaw during block processing in go-ethereum (CVSS 7.5)
• CVE-2020-26265 — Consensus flaw during block processing (CVSS 5.3)
• CVE-2020-26264 — LES Server DoS via GetProofsV2 (CVSS 6.5)
• CVE-2020-26242 — Denial of service in geth (CVSS 7.5)
• CVE-2020-26241 — Shallow copy bug in geth (CVSS 7.1)
• CVE-2020-26240 — Erroneous Proof of Work calculation in geth (CVSS 7.5)
• CVE-2018-20421 — (CVSS 7.5)
• CVE-2018-19184 — (CVSS 7.5)
• CVE-2018-16733 — (CVSS 7.5)