VYPR
Vendor

Iohk

Products
1
CVEs
4
Across products
4
Status
Private

Products

1

Recent CVEs

4
  • CVE-2023-38701CriOct 4, 2023
    risk 0.59cvss 9.1epss 0.01

    Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head first to the `commit` validator, where they remain until they are either collected into the `head` validator or the protocol…

  • CVE-2023-42449HigOct 4, 2023
    risk 0.53cvss 8.1epss 0.01

    Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs for the head they are initializing due to incorrect data validation logic in the head token minting policy which then…

  • CVE-2023-42806MedSep 21, 2023
    risk 0.42cvss 6.5epss 0.00

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants to close the head or…

  • CVE-2023-42448HigOct 4, 2023
    risk 0.00cvss 8.1epss 0.01

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum of the UTxO at the head validator must stay unchanged as the state progresses from Open to Closed (Close transaction), but no such…