Elementsproject C-lightning — known CVE vulnerabilities

Every CVE whose affected-product data names Elementsproject C-lightning, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-41592 — CVSS 9.4 (critical): Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.
• CVE-2019-12998 — CVSS 7.5 (high): c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be…