Input-Output-Hk Hydra
4 CVEs affecting Input-Output-Hk Hydra. Latest disclosed: 2023-10-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38701 | Critical | 9.1 | 2023-10-04 | Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head first to the `… |
CVE-2023-42449 | High | 8.1 | 2023-10-04 | Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs fo… |
CVE-2023-42448 | High | 8.1 | 2023-10-04 | Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum of the UTx… |
CVE-2023-42806 | Medium | 6.5 | 2023-09-21 | Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be… |