2 matches found
Improper Input Validation
@fuel-ts/account is vulnerable to Improper Input Validation. The vulnerability is caused due to the fund function in fuels-ts/packages/account/src/account.ts which gets the needed resources statelessly with the function getResourcesToSpend without taking into consideration already used UTXOs. Thi...
@fractl-ui/fuel (>=0.3.4, <=0.3.5), @fuel-ts/contract (>=0.0.0-next-20240210135306, <=0.92.1) +15 more potentially affected by CVE-2024-41945 via @fuel-ts/account (>=0.0.0-next-20240210135306, <=0.92.1)
@fuel-ts/account NPM version =0.0.0-next-20240210135306, =0.3.4, =0.0.0-next-20240210135306, =0.0.0-next-20240210135306, =0.0.0-next-20241128172443, =0.0.0-next-20240210135306, =0.1.5, =0.1.0, =1.0.0, =2.35.1-rc.1, =0.1.0, =0.0.50, =0.0.0-next-20240210135306, =1.0.0, =1.0.5 and more Source cves:...