Lightning Network Daemon Project Lightning Network Daemon — known CVE vulnerabilities

Every CVE whose affected-product data names Lightning Network Daemon Project Lightning Network Daemon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-41593 — CVSS 8.6 (high): Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.
• CVE-2020-26896 — CVSS 8.2 (high): Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC…
• CVE-2022-39389 — CVSS 8.2 (high): Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are…
• CVE-2020-26895 — CVSS 5.3 (medium): Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid…