-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0327
============================================================

Advisory-ID:  0xCERT-2026-0327
Severity:     High
Published:    2026-11-09T07:12:58.000Z
Updated:      2026-11-09T08:08:03.551Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0327

Title: Lighthouse v8.3.3: security release for Ethereum node operators

Summary
- -------
Lighthouse v8.3.3 (released 2026-11-09) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Details
- -------
Summary
Lighthouse v8.3.3 (released 2026-11-09) includes security fixes according to its release notes. Ethereum node operators running Lighthouse should review and upgrade.

Affected
- - Lighthouse (sigp/lighthouse) versions before v8.3.3

From the release notes
## Summary
⚠️ Lighthouse v8.3.3 is a high-priority patch release containing security fixes. All Lighthouse beacon nodes should be upgraded as soon as possible. Details of the vulnerabilities will be disclosed at a later date.
There are no breaking changes in this release. If you are upgrading from v8.2.x or earlier, please read the v8.3.0 release notes.
## Update Priority
User Class
Beacon Node
Validator Client
Staking Users
High
Low
Non-Staking Users
High
- ---
See Update Priorities for more information about this table.
## Security Content
Links to security advisories will be provided here once network operators have had time to upgrade.
You can read a blog post about our handling of vulnerabilities here: https://sigmaprime.io/blog/bug-reports/
## All Changes
- - Release v8.3.3
- - Update libp2p
- - Bump crypto-bigint
- - Build slasher tests as C17 to fix mdbx on GCC 15 (#10518)

Recommended actions
- - Upgrade Lighthouse to v8.3.3 or later
- - Check the release notes for any coordinated upgrade deadline or required configuration change

Source & attribution
This 0xCERT advisory relays the Lighthouse v8.3.3 release notes: https://github.com/sigp/lighthouse/releases/tag/v8.3.3. Refer to the upstream project for the authoritative record and any follow-up security advisories.

References
- ----------
- - https://github.com/sigp/lighthouse/releases/tag/v8.3.3

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0Fgmrx8kQJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmewqUCKq9a0TBLSQjJLGL2V5rIDYhhb0bsvC6IP
itSjpxYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAAqcQEAw2nxKL6oYO6q7JJI
16L7xmI1vBPEP/KbXAxf9uN2NYoA/RostlOENFjZvLEnuF/SZheK9QXxgkiW
zSU1XbUMK3cO
=wx/1
-----END PGP SIGNATURE-----