Browse / Linux Foundation Decentralized Trust

Linux Foundation Decentralized Trust

See its reports on the map

Attack surface: 52 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Linux Foundation Decentralized Trust

• Code Execution6
• Denial of Service4
• Access Control4
• Cross-site Scripting3
• Path Traversal3
• Authentication2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Brute Force of fabric-ca server admin accountImproper Restriction of Authentication Attempts · high
   61 votes
2. Docker Secret Disclosure via GitHub Actions Cache PoisoningInformation Disclosure · high
   56 votes
3. many commands can be manipulated to delete identities or affiliationsImproper Authentication - Generic · medium
   $50043 votes
4. POOL_UPGRADE request handler may allow an unauthenticated attacker to remotely execute code on every node in the network. Command Injection - Generic · critical
   $2,00039 votes
5. CVE-2023-46132Deserialization of Untrusted Data · high
   34 votes
6. Remote denial of service in HyperLedger FabricUncontrolled Resource Consumption · high
   32 votes
7. Code exec on Github runner via Pull request nameCode Injection · medium
   26 votes
8. Memory Leak in bytes_to_hexstring FunctionUse After Free · low
   25 votes
9. Unauthorized packages modification or secrets exfiltration via GitHub actionsImproper Access Control - Generic · high
   $1,50025 votes
10. DOS validator nodes of blockchain to block external connectionsUncontrolled Resource Consumption · high
    $1,50020 votes
11. Remote denial of service in HyperLedger FabricUncontrolled Resource Consumption · high
    12 votes
12. RCE vulnerability in Hyperledger Fabric SDK for JavaDeserialization of Untrusted Data · medium
    $20012 votes
13. fix(cmd-socketio-server): mitigate cross site scripting attack #2068InformativeCross-site Scripting (XSS) - Reflected · high
    $10010 votes
14. Cross Site Scripting Vulnerability in fabric-sdk-py source code InformativeCross-site Scripting (XSS) - DOM
    9 votes
15. Relative Path Traversal vulnerability in fabric-private-chaincodeInformativePath Traversal
    6 votes
16. Fix : (Security) Mitigate Path Traversal BugPath Traversal · low
    $2006 votes
17. Vulnerability in Private Data Endorsement Policy Management in Hyperledger Fabric 2.0InformativeImproper Access Control - Generic
    6 votes
18. Enrolling to a CA that returns an empty response crashes the node processUncontrolled Resource Consumption · medium
    $5006 votes
19. CVE-2017-5929: Hyperledger - Arbitrary Deserialization of Untrusted Data
    5 votes
20. fix(security):Path Traversal BugN/APath Traversal · high
    3 votes
21. Corsa Site Scripting Vulnerability (XSS)N/ACross-site Scripting (XSS) - Reflected · high
    3 votes
22. The “payload” Field of Transactions in a Block Reveals the Private Data to All Peers InformativeImproper Access Control - Generic
    3 votes
23. Vulnerabilities in Endorsement Mechanism of Private Data Related Transactions in Hyperledger Fabric 2.0InformativeImproper Access Control - Generic
    3 votes
24. [indy_node]POOL_UPGRADE command injection, Trustee Node can execute command in any other Node`s system.OS Command Injection
    2 votes
25. Insecure TLS Configuration #3530N/AUse of a Broken or Risky Cryptographic Algorithm · low
    2 votes
26. Dependency confusion in https://github.com/hyperledger/aries-mobile-agent-react-native InformativeCode Injection
    1 votes