CVE-2023-33964

mx-chain-go is an implementation of the MultiversX blockchain protocol written in the Go language. Metachain cannot process a cross-shard miniblock. Prior to version 1.4.16, an invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor. This is strictly a processing issue that could have happened on MultiversX chain. If an error like this had occurred, the metachain would have stopped notarizing blocks from the shard chains. The resuming of notarization is possible only after applying a patched binary version. A patch in version 1.4.16 introduces `processIfTxErrorCrossShard` for the metachain transaction processor. There are no known workarounds for this issue.

• CWE-20

• https://github.com/multiversx/mx-chain-go/commit/97295471465f4b5f79e51b32f8b7111f8d921606Patch
• https://github.com/multiversx/mx-chain-go/security/advisories/GHSA-7xpv-4pm9-xch2Vendor Advisory
• https://github.com/multiversx/mx-chain-go/commit/97295471465f4b5f79e51b32f8b7111f8d921606Patch
• https://github.com/multiversx/mx-chain-go/security/advisories/GHSA-7xpv-4pm9-xch2Vendor Advisory

Published

May 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33959notation is a CLI tool to sign and verify OCI artifacts and …8.8
• CVE-2023-3396A vulnerability was found in Campcodes Retro Cellphone Onlin…6.5
• CVE-2023-33960OpenProject is web-based project management software. For an…7.5
• CVE-2023-33961Leantime is a lean open source project management system. St…5.4
• CVE-2023-33962JStachio is a type-safe Java Mustache templating engine. Pr…6.1
• CVE-2023-33963DataEase is an open source data visualization and analysis t…9.8
• CVE-2023-33965Brook is a cross-platform programmable network tool. The `tp…8.8
• CVE-2023-33966Deno is a runtime for JavaScript and TypeScript. In deno 1.3…9.8
• CVE-2023-33967EaseProbe is a tool that can do health/status checking. An S…9.8
• CVE-2023-33968Kanboard is open source project management software that foc…5.4
• CVE-2023-33969Kanboard is open source project management software that foc…5.4
• CVE-2023-3397A race condition occurred between the functions lmLogClose a…6.3