evm (>=0.22.0 <=0.22.1), evm-gasometer (=0.22.0) +1 more potentially affected by CVE-2021-29511 via evm-core (=0.22.0)

evm-core CARGO version =0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on evm-core and may be impacted: - evm =0.22.0, =0.22.1 - evm-gasometer =0.22.0 - evm-runtime =0.22.0 Source cves: CVE-2021-29511 Source advisory: OSV:GHSA-4JWQ-572W-4388...

GHSA-773Q-5334-5GF9 Memory over-allocation in evm-core

Prior to the patch, when executing specific EVM opcodes related to memory operations that use evmcore::Memory::copylarge, the crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack. The flaw was corrected in commit 19ade85...

Memory over-allocation in evm-core

Prior to the patch, when executing specific EVM opcodes related to memory operations that use evmcore::Memory::copylarge, the crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack. The flaw was corrected in commit 19ade85...

evm (>=0.22.0 <=0.22.1), evm-gasometer (=0.22.0) +1 more potentially affected by unknown CVE via evm-core (=0.22.0)

evm-core CARGO version =0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on evm-core and may be impacted: - evm =0.22.0, =0.22.1 - evm-gasometer =0.22.0 - evm-runtime =0.22.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0066...

evm (>=0.13.0 <=0.20.0), evm-gasometer (>=0.13.0 <=0.20.0) +2 more potentially affected by unknown CVE via evm-core (>=0.13.1 <=0.20.0)

evm-core CARGO version =0.13.1, =0.13.0, =0.13.0, =0.13.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0066...