GO-2025-4236
NoneCVSS
—
EPSS
—
Published
Dec 15, 2025
CISA due date
—
The record
Finality Provider vulnerable to anti-slashing bypassing due to misconfiguration in github.com/babylonlabs-io/finality-provider
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/babylonlabs-io/finality-provider | 0 | No fix |
| Go | github.com/babylonlabs-io/finality-provider | 0 | 1.0.4 |
| Go | github.com/babylonlabs-io/finality-provider | 1.1.0-rc.0 | No fix |
| Go | github.com/babylonlabs-io/finality-provider | 1.1.0-rc.1 | No fix |
| Go | github.com/babylonlabs-io/finality-provider | 1.99.0-devnet.6 | No fix |
| go | github.com/babylonlabs-io/finality-provider | 1.1.0-rc.0 | No fix |
| go | github.com/babylonlabs-io/finality-provider | 1.1.0-rc.1 | No fix |
| go | github.com/babylonlabs-io/finality-provider | 1.99.0-devnet.6 | No fix |