VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/ethereum/go-ethereum · Version

github.com/ethereum/go-ethereum v1.17.7

v1.17.7 is affected by 38 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 12 Medium 8 Low 0 Unrated 17

All github.com/ethereum/go-ethereum versions & vulnerabilities → Source repository Search the database for this package →
Released 30 Sep 2026 Licence GPL-3.0 Also known from other sources 0 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/ethereum/go-ethereum v1.17.7 vulnerabilities

38 vulnerabilities cover github.com/ethereum/go-ethereum v1.17.7. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-26314: Go Ethereum DoS Vulnerability via Malicious p2p Message 8.7 high 1.16.9 18 Feb 2026
CVE-2024-32972: go-ethereum vulnerable to DoS via malicious p2p message 7.5 high 1.13.15 06 May 2024
Denial of Service Vulnerability in go-ethereum 7.5 high No fix published 18 Oct 2023
CVE-2023-40591: Denial of Service Vulnerability in Go-Ethereum 7.5 high 1.12.1-stable 06 Sep 2023
CVE-2018-12018: Go Ethereum LES Protocol Implementation Denial of Service Vulnerability 7.5 high 1.8.11 14 May 2022
CVE-2021-42219: Denial of Service in go-ethereum 7.5 high No fix published 18 Mar 2022
CVE-2022-23327: Denial of Service in Go-Ethereum 7.5 high No fix published 05 Mar 2022
CVE-2022-23328: Denial of Service in Go-Ethereum 7.5 high No fix published 05 Mar 2022
CVE-2018-19184: Denial of Service in geth 7.5 high 1.8.14 29 Jun 2021
CVE-2018-16733: Improper Input Validation in github.com/ethereum/go-ethereum/eth 7.5 high 1.8.14 18 May 2021
CVE-2026-22868: High CPU Usage Vulnerability in go-ethereum via Malicious p2p Message 7.1 high 1.16.8 13 Jan 2026
CVE-2026-22862: go-ethereum DoS Vulnerability via Malicious p2p Message 7.1 high 1.16.8 13 Jan 2026
CVE-2026-26313: Go Ethereum DoS Vulnerability via Malicious P2P Message 6.9 medium 1.17.0 18 Feb 2026
CVE-2020-26264: Denial of Service in github.com/ethereum/go-ethereum 6.5 medium 1.9.25 29 Jun 2021
CVE-2022-37450: Go Ethereum - Manipulation of Time-Difference Values to Replace Main-Chain Blocks 5.9 medium No fix published 06 Aug 2022
CVE-2022-29177: Denial of Service via malicious p2p message in Go Ethereum 5.9 medium 1.10.17 24 May 2022
CVE-2021-41173: Panic via maliciously crafted message in github.com/ethereum/go-ethereum 5.7 medium 1.10.9 25 Oct 2021
CVE-2021-43668: Denial of Service in Go-Ethereum 5.5 medium No fix published 23 Nov 2021
CVE-2020-26240: Erroneous Proof of Work calculation in geth 5.3 medium 1.9.24 29 Jun 2021
CVE-2026-26315: Go Ethereum ECIES Public Key Validation Flaw in RLPx Handshake N/A unrated 1.16.9 24 Feb 2026
CVE-2026-26313: Go Ethereum DoS Vulnerability via Malicious p2p Message N/A unrated 1.17.0 24 Feb 2026
CVE-2026-26314: Go Ethereum - Crash via Malicious P2P Message N/A unrated 1.16.9 24 Feb 2026
CVE-2026-26315: Go Ethereum ECIES Public Key Validation Flaw N/A medium 1.16.9 18 Feb 2026
CVE-2026-22868: High CPU Usage Vulnerability in github.com/ethereum/go-ethereum N/A unrated 1.16.8 23 Jan 2026
CVE-2026-22862: DoS Vulnerability in github.com/ethereum/go-ethereum via Malicious P2P Message N/A unrated 1.16.8 23 Jan 2026
CVE-2018-16733: Go Ethereum Improper Input Validation in github.com/ethereum/go-ethereum N/A unrated 1.8.14 21 Aug 2024
CVE-2018-19184: Denial of Service in github.com/ethereum/go-ethereum N/A unrated 1.8.14 21 Aug 2024
CVE-2020-26240: Erroneous Proof of Work calculation in geth in github.com/ethereum/go-ethereum N/A unrated 1.9.24 21 Aug 2024
CVE-2022-29177: Denial of Service (DoS) in Go Ethereum N/A unrated 1.10.17 21 Aug 2024
Denial of Service Vulnerability in go-ethereum N/A unrated 1.9.24 21 Aug 2024
Denial of Service in github.com/ethereum/go-ethereum N/A unrated 1.13.15 08 May 2024
CVE-2023-40591: Unbounded memory consumption in github.com/ethereum/go-ethereum N/A unrated 1.12.1 25 Oct 2023
CVE-2021-41173: Panic via maliciously crafted message in github.com/ethereum/go-ethereum N/A unrated 1.10.9 15 Jul 2022
CVE-2021-39137: Consensus flaw during block processing in go-ethereum N/A unrated 1.10.8 15 Jul 2022
Denial of Service Vulnerability in go-ethereum N/A critical 1.9.24 29 Jun 2021
CVE-2020-26264: Panic in github.com/ethereum/go-ethereum N/A unrated 1.9.25 14 Apr 2021
CVE-2020-26264: Denial of Service in github.com/ethereum/go-ethereum N/A unrated 1.9.25 14 Apr 2021
CVE-2018-12018: Panic in github.com/ethereum/go-ethereum N/A unrated 1.8.11 14 Apr 2021

Looking for another version, or everything Vulert holds for github.com/ethereum/go-ethereum?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/ethereum/go-ethereum v1.17.7

Is github.com/ethereum/go-ethereum v1.17.7 vulnerable?

Yes. 38 vulnerabilities in the Vulert database cover github.com/ethereum/go-ethereum v1.17.7: 1 critical, 12 high, 8 medium and 0 low, plus 17 not yet rated. Each entry above names the fixed version to move to.

Is v1.17.7 the latest release of github.com/ethereum/go-ethereum?

No. v1.17.7 was published 30 Sep 2026, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor github.com/ethereum/go-ethereum for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/ethereum/go-ethereum version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.