CVE-2022-23327: Ethereum Go Ethereum

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).

Affected products

• Ethereum Go Ethereum: up to and including 1.10.12

Published 2022-03-04. Last modified 2026-07-09.