CVE-2021-39137: Ethereum Go Ethereum

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.

Affected products

• Ethereum Go Ethereum: from 1.10.0, before 1.10.8 (fixed in 1.10.8)

Published 2021-08-24. Last modified 2026-06-17.