Bifrost vulnerabilities

CVEs whose affected-version data names the Bifrost package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86840Critical· 9.1PoC

2w ago

The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution

The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered `channel_id` when minting tokens without verifying …

▾ AbyssalBitfrost.io · BifrostEPSS 0.24%via NVD