Upgraded Q -> M from #76 [1670347574630]

Judge has assessed an item in Issue 76 as M risk. The relevant finding follows: L02 address.callvalue:x should be used instead of payable.transfer Impact The use of payable.transfer is heavily frowned upon because it can lead to the locking of funds. The transfer call requires that the recipient...

Upgraded Q -> M from #366 [1670366311052]

Judge has assessed an item in Issue 366 as M risk. The relevant finding follows: 5. Cannot cancel mutual consent Mutual consent works by using two TXs with the same msg.data. However, when first one call, there is no way to cancel it. First caller might send wrong msg.data or later caller change...

Upgraded Q -> M from #236 [1669938261828]

Judge has assessed an item in Issue 236 as M risk. The relevant finding follows: It is possible the DAO determine the amount of commission very high for its own benefit, so setting a range for determining the commission seems logical. Especially MAX commission should be pre- defined. --- The text...

CVE-2022-43995 affecting package sudo for versions less than 1.9.12p1-1

CVE-2022-43995 affecting package sudo for versions less than 1.9.12p1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-39400 affecting package mysql 8.0.29-1

CVE-2022-39400 affecting package mysql 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21608 affecting package mysql 8.0.29-1

CVE-2022-21608 affecting package mysql 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21633 affecting package mysql 8.0.29-1

CVE-2022-21633 affecting package mysql 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21611 affecting package mysql 8.0.29-1

CVE-2022-21611 affecting package mysql 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3080 affecting package bind 9.16.27-1

CVE-2022-3080 affecting package bind 9.16.27-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-35252 affecting package curl 7.84.0-1

CVE-2022-35252 affecting package curl 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-42916 affecting package curl 7.84.0-1

CVE-2022-42916 affecting package curl 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-42915 affecting package curl 7.84.0-1

CVE-2022-42915 affecting package curl 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41932 Creation of new database tables through login form on PostgreSQL

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create many new schemas and fill them with tables just by using a crafted user identifier in the login form. This may lead to degraded database performance. The...

Upgraded Q -> M from #209 [1668684399391]

Judge has assessed an item in Issue 209 as M risk. The relevant finding follows: SINGLE POINT OF FAILURE --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #164 [1668687728737]

Judge has assessed an item in Issue 164 as M risk. The relevant finding follows: 01 Lack of check if dust ether transfer is successful --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from #74 [1668688523897]

Judge has assessed an item in Issue 74 as M risk. The relevant finding follows: Low-7 EXCHANGE & SWAP are able to transfer any user funds to other addresses --- The text was updated successfully, but these errors were encountered: All reactions...

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-36049 affecting package helm for versions less than 3.9.4-2

CVE-2022-36049 affecting package helm for versions less than 3.9.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-42916 affecting package curl for versions less than 7.86.0-1

CVE-2022-42916 affecting package curl for versions less than 7.86.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-35252 affecting package curl for versions less than 7.86.0-1

CVE-2022-35252 affecting package curl for versions less than 7.86.0-1. An upgraded version of the package is available that resolves this issue...