Zincati 安全漏洞

Zincati is a Fedora CoreOS auto-update agent program from CoreOS Open Source. A security vulnerability exists in Zincati versions prior to v0.0.24 through v0.0.30, which stems from a logic error that could lead to the deployment of older versions by arbitrary users...

Assembly proxy creation lacks bytecode validation, enabling arbitrary contract deployment.

Lines of code Vulnerability details Impact The proxy contract creation uses assembly to compute the create2 address. But it does not verify the deployed bytecode matches expectations. The use of assemble for proxy contract creation has potential risks if the bytecode is not validated. This could...