https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:48:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-30523 EUVD-2026-30523 https://cve.radiocsirt.org/vuln/euvd-2026-30523 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39193 <p>Frontier is Substrate&#39;s Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints. A patch is available in commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26. There are no workarounds aside from applying the patch.</p> <p>Frontier is Substrate&#39;s Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints. A patch is available in commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26. There are no workarounds aside from applying the patch.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39193 https://cve.radiocsirt.org/vuln/ghsa-hw4v-5x4h-c3xm <p><strong>Affected:</strong> crates.io: pallet-ethereum</p> <p>### Impact</p> <p>A bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints.</p> <p>### Patches</p> <p>Patches are applied in PR #465.</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Patch PR: https://github.com/paritytech/frontier/pull/465</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Open an issue in the [Frontier repo](https://github.com/paritytech/frontier)</p> <p><strong>Affected:</strong> crates.io: pallet-ethereum</p> <p>### Impact</p> <p>A bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints.</p> <p>### Patches</p> <p>Patches are applied in PR #465.</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Patch PR: https://github.com/paritytech/frontier/pull/465</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Open an issue in the [Frontier repo](https://github.com/paritytech/frontier)</p> https://cve.radiocsirt.org/vuln/ghsa-hw4v-5x4h-c3xm https://cve.radiocsirt.org/vuln/gsd-2021-39193 gsd-2021-39193 https://cve.radiocsirt.org/vuln/gsd-2021-39193