An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 1.8% on proxy.golang.org
Top 0.7% dependent packages on proxy.golang.org
Top 0.6% dependent repos on proxy.golang.org
Top 3.3% forks on proxy.golang.org
Top 1.1% docker downloads on proxy.golang.org

proxy.golang.org : github.com/cometbft/cometbft

CometBFT: A distributed, Byzantine fault-tolerant, deterministic state machine replication engine, and fork of Tendermint Core.

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/cometbft/cometbft
Keywords: bft , blockchain , cosmos , database , distributed-systems , go , tendermint-consensus
License: Apache-2.0
Latest release: 3 months ago
First release: about 2 years ago
Namespace: github.com/cometbft
Dependent packages: 1,504
Dependent repositories: 122
Stars: 251 on GitHub
Forks: 52 on GitHub
Docker dependents: 99
Docker downloads: 168,750
See more repository details: repos.ecosyste.ms
Last synced: about 2 hours ago

Moderate
GSA_kwCzR0hTQS1tdmozLXFycWgtY2p2cs4AA0ON
CometBFT PeerState JSON serialization deadlock
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1xcjhyLW00OTUtN2hjNM4AA4kV
Validation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbft
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1oZzU4LXJmMmgtNnJyN84AA9aS
CometBFT is unstability during blocksync when syncing from malicious peer
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: 10 months ago
High
GSA_kwCzR0hTQS1yM3I0LWc3aHEtcHE0Zs4ABEGD
CometBFT allows a malicious peer to stall the network by disseminating seemingly valid block parts
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: 3 months ago
High
GSA_kwCzR0hTQS13MjR3LXdwNzctcWZmbc4AA0OO
CometBFT may duplicate transactions in the mempool's data structures
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: almost 2 years ago
Low
GSA_kwCzR0hTQS1nNXh4LWM0aHYtOWNjY84AA_QE
CometBFT's state syncing validator from malicious node may lead to a chain split
Ecosystems: go
Packages: github.com/cometbft/cometbft, github.com/cometbft/cometbft/light
Source: github
Published: 8 months ago
High
GSA_kwCzR0hTQS1wN212LTUzZjItNGN3as4ABBBp
CometBFT Vote Extensions: Panic when receiving a Pre-commit with an invalid data
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS0yMnFxLTN4d20tcjV4NM4ABEGB
CometBFT allows a malicious peer to make node stuck in blocksync
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: 3 months ago
Low
GSA_kwCzR0hTQS01NTVwLW00djYtY3F4ds4AA5lr
ASA-2024-004: Default configuration param for Evidence may limit window of validity
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: about 1 year ago
Low
GSA_kwCzR0hTQS1ocTU4LXA5bXYtMzM4Y84AA2Jf
CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation
Ecosystems: go
Packages: github.com/cometbft/cometbft
Source: github
Published: over 1 year ago