Besu fixed five security vulnerabilities found by CertiK in version 26.7.1, released on July 27. CertiK discovered resource-exhaustion risks in various interfaces and reported them to Besu for remediation. Besu released technical advisories on August 14, giving operators time to upgrade before making detailed vulnerability information public.

Leave a Reply