https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:32:30.449778+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05814 bdu:2022-05814 2026-10-08T10:32:30.453181+00:00 bdu:2022-05814 https://cve.radiocsirt.org/vuln/euvd-2026-30435 EUVD-2026-30435 2026-10-08T10:32:30.453214+00:00 EUVD-2026-30435 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39137 fkie_cve-2021-39137 2026-10-08T10:32:30.453229+00:00

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.

 https://cve.radiocsirt.org/vuln/ghsa-9856-9gg9-qcmq GHSA-9856-9gg9-qcmq — Ethereum Contains Consensus Flaw During Block Processing 2026-10-08T10:32:30.453259+00:00

Affected: Go: github.com/ethereum/go-ethereum

### Impact

A vulnerability in the Geth EVM could cause a node to reject the canonical chain.

### Description

A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different `stateRoot` when processing a maliciously crafted transaction. This, in turn, would lead to the chain being split in two forks.

All Geth versions supporting the London hard fork are vulnerable (which predates London), so all users should update.

This bug was exploited on Mainnet at block 13107518, leading to a minority chain split.

### Patches

A patch is included in the `v1.10.8` release. The exact patch to fix the issue is contained within this [commit](https://github.com/ethereum/go-ethereum/pull/23381/commits/4d4879cafd1b3c906fc184a8c4a357137465128f)

### Workarounds

No workarounds exist, save to update and/or apply the patch commit.

### References.

Post-mortem [write-up](https://github.com/ethereum/go-ethereum/blob/master/docs/postmortems/2021-08-22-split-postmortem.md).

### Credits

The bug was found by @guidovranken (working for [Sentnl](https://sentnl.io/) during an audit of the [Telos EVM](https://www.telos.net/evm)) and reported via bounty@ethereum.org.

### For more information If you have any questions or comments about this advisory:

* Open an issue in [go-ethereum](https://github.com/ethereum/go-ethereum/) * Email us at [security@ethereum.org](mailto:security@ethereum.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-39137 gsd-2021-39137 2026-10-08T10:32:30.453303+00:00 gsd-2021-39137