mpp vulnerable to Gas Draining with low gas limit

Vulnerability When the server acts as the fee payer, mpp Elixir 0.4.0 ZenHive/mpp does not validate whether the gaslimit set by the client is enough before broadcasting. A malicious client can drain the server's gas without paying. A transferWithMemo call on Tempo Moderato testnet requires 51,299...

GHSA-VJ8P-HP9X-GH47 mpp vulnerable to Gas Draining with low gas limit

Vulnerability When the server acts as the fee payer, mpp Elixir 0.4.0 ZenHive/mpp does not validate whether the gaslimit set by the client is enough before broadcasting. A malicious client can drain the server's gas without paying. A transferWithMemo call on Tempo Moderato testnet requires 51,299...