CVE-2022-28937: Fisco-Bcos

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes to stop producing new blocks and processing new clients' requests.

Affected products

• Fisco-Bcos Fisco-Bcos: version 3.0.0 only

Published 2022-05-15. Last modified 2026-06-17.