CVE-2022-43548 affecting package nodejs 14.20.1-2

CVE-2022-43548 affecting package nodejs 14.20.1-2. An upgraded version of the package is available that resolves this issue...

Upgraded Q -> M from #188 [1671981716625]

Judge has assessed an item in Issue 188 as M risk. The relevant finding follows: 188 --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #4 [1671756144822]

Judge has assessed an item in Issue 4 as M risk. The relevant finding follows: GroupBuy: Insertion timestamp ignored The documentation states that "If the users have the same quantity as well, the bid that was placed later will have Raes removed.". However, with the current implementation, this i...

Upgraded Q -> M from #32 [1671721748112]

Judge has assessed an item in Issue 32 as M risk. The relevant finding follows: 2. StableVault deposits are limited to 18 decimals During deposit and withdraw to/from StableVault contract, it mints/burns the same amount of stable tokens with respect to decimals. The current implementation support...

Upgraded Q -> M from #22 [1671528877220]

Judge has assessed an item in Issue 22 as M risk. The relevant finding follows: minBidPrices is rounded down --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #27 [1671522165760]

Judge has assessed an item in Issue 27 as M risk. The relevant finding follows: Dup of 45. The effect is severe enough IMO to warrant a med severity although I initially intepreted it as a spec mismatch. --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #4 [1671527898955]

Judge has assessed an item in Issue 4 as M risk. The relevant finding follows: GroupBuy.contribute does not set pendingBalances for unused capital, leading to locked up money --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #268 [1670783513081]

Judge has assessed an item in Issue 268 as M risk. The relevant finding follows: Use of selfdestruct in FixedPrice.sol and OpenEdition.sol --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #506 [1670783534926]

Judge has assessed an item in Issue 506 as M risk. The relevant finding follows: selfDestruct will probably be deactivated soon --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #34 [1670783427149]

Judge has assessed an item in Issue 34 as M risk. The relevant finding follows: Selfdestruct is prone to being changed in a future hard fork --- The text was updated successfully, but these errors were encountered: All reactions...

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41890 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41890 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41884 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41884 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41908 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41908 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-17455 affecting package libntlm for versions less than 1.6-1

CVE-2019-17455 affecting package libntlm for versions less than 1.6-1. An upgraded version of the package is available that resolves this issue...

Upgraded Q -> M from #508 [1670444214372]

Judge has assessed an item in Issue 508 as M risk. The relevant finding follows: 508 --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #454 [1670445333683]

Judge has assessed an item in Issue 454 as M risk. The relevant finding follows: L‑01 Don't use payable.transfer/payable.send The use of payable.transfer is heavily frowned upon because it can lead to the locking of funds. The transfer call requires that the recipient is either an EOA account, or...

CVE-2022-4141 affecting package vim 9.0.0805-1

CVE-2022-4141 affecting package vim 9.0.0805-1. An upgraded version of the package is available that resolves this issue...

Upgraded Q -> M from #366 [1670366212013]

Judge has assessed an item in Issue 366 as M risk. The relevant finding follows: 1. Not support fee-on-transfer tokens Every tokens of credit line will be transferred from lender to LineOfCredit first, then to borrower later. These 2-transfer steps will make the tax for some fee-on-transfer token...