Blockchain
Approved changes feed: RSS · Atom
cpe:2.3:a:chia:blockchain:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Chia (142af3fa-355e-57af-9c52-a9be666afdd5) |
|---|---|
| Product | Blockchain (fbaef4c3-1235-5d9e-9522-727540e187f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chia-network/chia-blockchain |
purl2cpe | 2026-06-01 10:17:49.576503 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3194 |
vulnerable | 2026-06-08 08:01:18.072655 |
Chia Blockchain RPC Server Master Passphrase get_private_key missing authentication
MEDIUM (4.5)
A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transaction/get_private_key of the component RPC Server Master Passphrase Handler. This manipulation causes missing authentication. The attack can only be executed locally. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been published and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason "This is by design. The user is responsible for host security".
Published: 2026-02-25T17:02:17.420Z
Updated: 2026-02-25T18:43:40.383Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3193 |
vulnerable | 2026-06-08 08:01:18.072088 |
Chia Blockchain send_transaction cross-site request forgery
LOW (3.1)
A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason "This is by design. The user is responsible for host security".
Published: 2026-02-25T16:32:08.589Z
Updated: 2026-02-27T18:20:18.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3192 |
vulnerable | 2026-06-08 08:01:18.065108 |
Chia Blockchain RPC Credential rpc_server_base.py _authenticate improper authentication
MEDIUM (5.6)
A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of the file rpc_server_base.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was informed early via email. A separate report via bugbounty was rejected with the reason "This is by design. The user is responsible for host security".
Published: 2026-02-25T16:02:12.515Z
Updated: 2026-02-25T20:19:14.151Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.