Repository Issue Activity (beta)

#5005 [F48] send_message Allows Admission of Permanently Unexecutable Async Messages Due to Missing Maximum Gas Validation

#5052 [F9] `BootstrapPart` new-element parsing can be weaponized into a heap-exhaustion DoS

#5056 [F15] Unauthenticated oversized padded bootstrap client frames can cause denial of service

#4980 [F11] Bootstrap graph parsing disables genesis parent validation, enabling crashable malformed final blocks

#4981 [F12] Unsigned `ExportActiveBlock.parents` metadata is trusted during bootstrap without matching the signed header

#4987 [F24] Extra equivocating full blocks stay permanently in `Incoming` and can exhaust memory

#4990 [F27] Stale finalization state in `check_desync` can trigger false-positive `NeedSync` and unnecessary rebootstrap

#4991 [F28] Bootstrap metadata can arbitrarily advance the node's finality frontier

#5093 [F144] SDK certificate-store setting is ignored while client constructors force plaintext transport

#4995 [F32] Malformed Deferred-Call Keys Can Panic Validation and Cause Denial of Service

#5079 [PDF#8] Endorsement-pool index/storage desync leaks memory and can panic a producer node

#5069 [F106] Improper Peer Banning Based on Mutable Propagation Cache Enables Ban Evasion and False Positives

#5047 [F2] Private JSON-RPC node bans bypass gRPC batch guards

#5000 [F43] Denounced validators still receive slot rewards

#5127 Cleanup outdated code after breaking update release

#5010 [F58] Auto-sell liquidates current rolls instead of the rolls that were active for the penalized cycle

#5014 [F65] Stale Production Statistics Are Propagated Across Interpolated Restart Cycles

#5180 Enable TLS (and mTLS) for the massa-sdk gRPC client

#5070 [F107] Count-based propagation cache can drop block refs before the advertised propagation window ends

#5108 [F127+F131] asked_operations/op_batch_buffer: duplicate-announcement buffering vs. stale state across reconnects

#5107 [F114] Unbounded endorsement queue draining enables memory/CPU exhaustion

#5059 [F42] Unbounded Datastore Key Enumeration Enables Underpriced DoS

#5119 [F122] Operation propagation announcement path can be starved under channel flooding

#5030 [F99] Malformed persisted RNG seed length can trigger panic and remote DoS on cycle finalization

#5012 [F63] MIP Restart Validation Omits Delayed-Start Period Due to Shutdown Boundary Mismatch