id: GO-2023-1865
modules:
    - module: code.vegaprotocol.io/vega
      versions:
        - fixed: 0.71.6
      vulnerable_at: 0.71.5
summary: Vega's validators able to submit duplicate transactions in code.vegaprotocol.io/vega
cves:
    - CVE-2023-35163
ghsas:
    - GHSA-8rc9-vxjh-qjf2
references:
    - advisory: https://github.com/vegaprotocol/vega/security/advisories/GHSA-8rc9-vxjh-qjf2
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-35163
    - web: https://github.com/vegaprotocol/vega/commit/56b09bf57af8cd9eca5996252d86f469a3e34c68
    - web: https://github.com/vegaprotocol/vega/releases/tag/v0.71.6
source:
    id: GHSA-8rc9-vxjh-qjf2
    created: 2024-08-20T11:49:25.971228-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE