← Vulnerability feed

Vulnerability record · CVE-2026-57445 · published 3 September 2026

CVE-2026-57445: Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance…

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount() while an active stream needs an escrow reserve. However, the approve-side dispute resolution path drains the whole available escrow balance to the proposal beneficiary. At time of publication, there are no publicly known patches.

8.7 CVSS 4.0 High EPSS 0.43% · top 65.5% CWE-703 · CWE-703 Deferred
8.7CVSS 4.0 base score
0.43%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
1References
9 Sep 2026Last modified by NVD

Description

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount() while an active stream needs an escrow reserve. However, the approve-side dispute resolution path drains the whole available escrow balance to the proposal beneficiary. At time of publication, there are no publicly known patches.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

References

LinkTags
https://github.com/1Hive/gardens-v2/security/advisories/GHSA-3xpr-2mm7-77j7

Track CVE-2026-57445 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2022-22265Samsung NPU driver improper exception handling enables memory write and code executionThe NPU driver in Samsung Android devices mishandles exceptional conditions, allowing arbitrary memory writes and code execution. The flaw was fixed …KEVEPSS 0.39%analysed6.7CVE-2021-25372Samsung Android DSP driver improper boundary check allows out-of-bounds memory accessThe Samsung DSP driver in Android contains an improper boundary check that permits out-of-bounds memory access. The flaw is fixed in SMR Mar-2021 Rel…KEVEPSS 0.80%analysed4.4CVE-2021-25370Samsung Android dpu driver file descriptor use-after-free causes kernel panicThe dpu driver in Samsung Android mishandles file descriptors, resulting in a use-after-free and memory corruption that leads to a kernel panic. The …KEVEPSS 0.89%analysed

Source: NIST National Vulnerability Database (record CVE-2026-57445), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.