Vulnerabilidades de Ultradag
CVEs publicadas que afetam produtos de Ultradag: 1 registro(s), com severidade, exploração e correções.
CVE-2026-40583
Alta · 8.2
CWE-460 21/04/2026
UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt
UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.