Stellar Rs-soroban-sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Stellar Rs-soroban-sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-26267 — CVSS 7.5 (high): soroban-sdk is a Rust SDK for Soroban contracts. Prior to versions 22.0.10, 23.5.2, and 25.1.1, the `#[contractimpl]` macro contains a bug…
• CVE-2026-24889 — CVSS 5.3 (medium): soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice`, and…
• CVE-2026-32322 — CVSS 5.3 (medium): soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for BN254 and BLS12-381…