GHSA-53rv-hcvm-rpp9: Lodestar snappy decompression issue

January 14, 2025

Lodestar client may fail to decode snappy framing compressed messages.

References

github.com/ChainSafe/lodestar
github.com/ChainSafe/lodestar/commit/18a0d681dbcc51fb2ac9456f31e91f4e31a18300
github.com/ChainSafe/lodestar/security/advisories/GHSA-53rv-hcvm-rpp9
github.com/advisories/GHSA-53rv-hcvm-rpp9

Code Behaviors & Features

Detect and mitigate GHSA-53rv-hcvm-rpp9 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →