filecoin-project has 2 CVEs on record between 2021 and 2026. 1 was published in the last 90 days. The median CVSS is 7.0 (high).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Weakness classes
Products
- filecoin-pin 1
- github.com/filecoin-project/lotus 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
filecoin-project vulnerabilities
CVEs affecting filecoin-project, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-58412High· 8.2Filecoin Pin: Fork bypass in the privileged GitHub Actions workflow
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in `upload-action/src/build.js` checks only `event.pull_request`. In the documented…
▾ Twilightfilecoin-project · filecoin-pinEPSS 0.23%via CVEORG
CVE-2021-21405Medium· 5.9BLS Signature "Malleability"
BLS Signature "Malleability"
▾ Sunlitfilecoin-project · github.com/filecoin-project/lotusEPSS 0.98%via OSV