Besu security vulnerabilities fixed in version 26.7.1

Disclosure: This content is provided by a third party. Neither crypto.news nor the author of this article endorses any product mentioned on this page. Users should conduct their own research before taking any action related to the company. Besu discloses five CertiK-found flaws after patching them in version 26.7.1, released July 27. Summary Besu fixed five CertiK-reported vulnerabilities in version 26.7.1 before publishing full technical advisories publicly afterward. CertiK found resource-exhaustion risks across networking, RPC, WebSocket, and consensus interfaces during independent security research. Coordinated disclosure gave Besu operators time to upgrade before detailed vulnerability information became publicly available. Besu published detailed advisories on August 14 covering five Besu security vulnerabilities found by CertiK and fixed in version 26.7.1, released on July 27. The issues affected the Java-based Ethereum client across peer-to-peer, RPC, WebSocket, and consensus-facing interfaces. Under affected configurations, they could exhaust memory or thread capacity and disrupt node availability or consensus processing. CertiK found the flaws through self-directed testin...