[GHSA-hg58-rf2h-6rr7] CometBFT is unstability during blocksync when syncing from malicious peer

[AHMED11178]

Updates

• Affected products

Comments
CometBFT experiences instability during block synchronization when syncing from a malicious peer. This issue arises because the malicious peer can disrupt the sync process, causing unexpected behavior and potential security vulnerabilities. Ensuring the reliability of peers and implementing robust verification mechanisms can mitigate this instability, allowing for a more secure and stable block synchronization process in CometBFT.

[github]

Hi there @greg-szabo! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[JonathanLEvans]

Hi @AHMED11178 , the pull request seems to be missing the changes you want to make. Could you clarify what you are asking for?