-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from a dependency (btcd) used by lnd, specifically in its transaction parsing logic. The error 'MsgTx.BtcDecode: too many witness items to fit into max message size' indicates improper input validation in btcd's transaction decoding function. However, the affected package listed in the query is lnd itself, not btcd. The fix involved updating the btcd dependency to v0.23.3, but no vulnerable functions were explicitly identified in lnd's own codebase from the provided data. The vulnerability arises from lnd's reliance on a vulnerable version of btcd, not from lnd's internal functions.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/lightningnetwork/lnd | go | < 0.15.4-beta | 0.15.4-beta |
GoGoOngoing coverage of React2Shell