GHSA-6447-269v-g68m
Critical · 9.1Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain
CVSS
9.1
EPSS
—
Published
May 6, 2026
CISA due date
—
The record
**Note: the fixed version of the validator client has been deployed for some time.**
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-39865 Axios is a promise based HTTP client for the browser and Node.js. CWE-662
- CVE-2026-28789 OliveTin gives access to predefined shell commands from a web interface. CWE-662
- GHSA-45m3-398w-m2m9 OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling CWE-662
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. CWE-662
- CVE-2021-46939 In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure… CWE-662
- CVE-2023-28229 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability CWE-662
- CVE-2022-3565 A vulnerability, which was classified as critical, has been found in Linux Kernel. CWE-662
- CVE-2020-7457 In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before… CWE-662