ethereum-optimism/optimism kona-node/v1.7.3 on GitHub

Overview

Note

kona-node is not production-ready. Production deployments should use op-node.

This release contains security fixes for the compromised eMudhra certificate authority (CVE-2026-111943).

rustls-webpki is updated from 0.103.15 to 0.103.16 (RUSTSEC-2026-0382), so kona-node rejects the compromised eMudhra intermediate certificates on its TLS connections to L1, L2 and beacon RPCs, including connections that use the system trust store. webpki-roots is updated from 1.0.7 to 1.0.10 (RUSTSEC-2026-0381), removing the eMudhra roots from the bundled Mozilla root set. Together these address CVE-2026-111943 (#23567)
The image's CA trust store (ca-certificates-bundle 20260909-r3) no longer includes the eMudhra emSign Root CA G3, C1 and C3 roots (#23566)

Full Changelog: kona-node/v1.7.2...kona-node/v1.7.3

🚢 Docker Image: