Approved changes feed: RSS · Atom

cpe:2.3:a:grin:grin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGrin (f38765fd-2c1b-59b0-8642-feb4a1c14931)
ProductGrin (86f2111e-8c72-55a7-b57a-94362e44b1e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mimblewimble/grin purl2cpe 2026-06-01 10:15:14.118394

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6638 vulnerable 2026-06-08 05:26:45.581469 Details available
Grin through 2.1.1 has Insufficient Validation.
Published: 2020-01-21T19:40:36.000Z
Updated: 2024-08-04T09:11:04.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15899 vulnerable 2026-06-08 05:19:27.144968 Details available
Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
Published: 2020-07-28T16:31:58.000Z
Updated: 2024-08-04T13:30:23.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12439 vulnerable 2026-06-08 05:17:58.188889 Details available
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.
Published: 2020-05-05T21:19:39.000Z
Updated: 2024-08-04T11:56:52.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9195 vulnerable 2026-06-08 05:14:25.104859 Details available
util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.
Published: 2019-02-26T19:00:00.000Z
Updated: 2024-08-04T21:38:46.569Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.