Incorrect Stability Assumption

Handle 0xsomeone Vulnerability details Impact An arbitrage opportunity presents itself whereby a user can exaggerate the discrepancy via flash loans between the USDC price reported and the actual USDC price to f.e. acquire a better rate for their loan. The impacted features of the system can be...

@archanova/contracts (>=1.0.0-beta.1, <=1.0.0-beta.3), @archanova/solidity (>=0.0.7, <=0.0.10) +13 more potentially affected by CVE-2020-5232 via @ensdomains/ens (>=0.1.1, <=0.3.11)

@ensdomains/ens NPM version =0.1.1, =1.0.0-beta.1, =0.0.7, =0.0.3, =0.0.3, =1.0.0, =0.0.2, =1.0.11, =1.1.1, =1.0.0, =3.1.0-ens-events.0, =0.6.1, =0.6.0, =0.0.8, =0.0.45 - ethregistrar 1.0.0 Source cves: CVE-2020-5232 Source advisory: OSV:GHSA-8F9F-PC5V-9R5H...

Chainlink: Testnet address being sent in cleartext as http://rinkeby.chain.link/ is missing SSL certificate

Summary: SSL certificate missing for page: http://rinkeby.chain.link/ which is letting an attacker to sniff sensitive information, in this case, user's testnet address as it is being transmitted unencrypted in clear text Description: http://rinkeby.chain.link/ missing SSL encryption, data sent ov...