Repository navigation

Security

SECURITY.md

Security Policy

Supported Versions

⏳ Lodestar currently undergoes a quick release cycle with regular minor releases published roughly fortnightly.
🌐 We encourage using the most recently released version before reporting an issue.

Reporting a Vulnerability

🚨 Please, send vulnerability reports to security@chainsafe.io.
⚠️ Please do not file a public ticket mentioning the vulnerability, as doing so could increase the likelihood of the vulnerability being used before a fix has been created, released and installed on the network.

Lodestar snappy checksum issue
GHSA-m9c9-mc2h-9wjw published Jan 14, 2025 by philknows

Low
Lodestar snappy decompression issue
GHSA-53rv-hcvm-rpp9 published Jan 14, 2025 by philknows

Low
AttesterSlashing number overflow
GHSA-cvj7-5f3c-9vg9 published May 12, 2022 by philknows

Moderate

Learn more about advisories related to ChainSafe/lodestar in the GitHub Advisory Database