go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming v1.10.8 release. No workaround are available.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:ethereum:go_ethereum:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"fixed": "1.10.8"
}
],
"source": "CPE_RANGE"
},
{
"original_tag": "v1.10.8",
"range": [
{
"fixed": "26675454bf93bf904be7a43cce6b3f550115ff90"
}
],
"source": "REFERENCES_TAG"
}
]
}