← Back

Grin

grin

Vendor: Grin • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Grin
1Grin
Jun 17, 2026
Jul 28, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
1Grin
1Grin
Jun 17, 2026
May 5, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.
1Grin
1Grin
Jun 17, 2026
Jan 21, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Grin through 2.1.1 has Insufficient Validation.
1Grin
1Grin
Jun 17, 2026
Feb 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.