CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-39137
High (7.5) in ethereum go ethereum. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in github.com/ethereum/go-ethereum 1.10.8.
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-436
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ethereum:go_ethereum
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9856-9gg9-qcmq | Go | github.com/ethereum/go-ethereum | >=1.10.0 <1.10.8 | 1.10.8 |
| GO-2022-0254 | Go | github.com/ethereum/go-ethereum | <1.10.8 | 1.10.8 |