1296 matches found
CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1
CVE-2021-42782 affecting package opensc for versions less than 0.22.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-38115 affecting package gd for versions less than 2.3.3-1
CVE-2021-38115 affecting package gd for versions less than 2.3.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-40812 affecting package gd for versions less than 2.3.3-1
CVE-2021-40812 affecting package gd for versions less than 2.3.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-30789 affecting package ntfs-3g for versions less than 2022.5.17-1
CVE-2022-30789 affecting package ntfs-3g for versions less than 2022.5.17-1. An upgraded version of the package is available that resolves this issue...
Upgraded Q -> H from 222 [1656255302682]
Judge has assessed an item in Issue 222 as High risk. The relevant finding follows: L-02 totalAssets of erc4626 should never revert eip-4626 According to the spec, totalAssets of erc4626 should never revert MUST NOT revert. wfcash would revert if it's matured but hasn't settled...
CVE-2021-34335 affecting package exiv2 for versions less than 0.27.5-1
CVE-2021-34335 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-29623 affecting package exiv2 for versions less than 0.27.5-1
CVE-2021-29623 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-37621 affecting package exiv2 for versions less than 0.27.5-1
CVE-2021-37621 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1
CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1. An upgraded version of the package is available that resolves this issue...
Upgraded Q -> H from 158 [1656140803140]
Judge has assessed an item in Issue 158 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> H from 158 [1656140317935]
Judge has assessed an item in Issue 158 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> H from 285 [1655952312863]
Judge has assessed an item in Issue 285 as High risk. The relevant finding follows: 1. Excess ether sent to FixedPricePassThruGate is lost low passThruGate redirects to a beneficiary only gate.ethCost, requiring that msg.value = gate.ethCost. As there are no other ways to access native tokens hel...
Upgraded Q -> H from 94 [1655957384739]
Judge has assessed an item in Issue 94 as High risk. The relevant finding follows: 2. Return values of transfer/transferFrom not checked Not all IERC20 implementations revert when there's a failure in transfer/transferFrom. The function signature has a boolean return value and they indicate error...
Upgraded Q -> M from 72 [1655579867255]
Judge has assessed an item in Issue 72 as Medium risk. The relevant finding follows: Use SafeTransferLib for all ETH send With the exception of issueRefund, other transfer should allow forward all gas to finish the transaction. To prevent case of costing more than 23000 gas for transfer. Line1...
Upgraded Q -> M from 153 [1655579808802]
Judge has assessed an item in Issue 153 as Medium risk. The relevant finding follows: L03 Callvalue:amt"" should be used instead of send In ForgottenRunesWarriorsGuild.withdrawAll. transfer and send should be avoided because they take a hard dependency on gas costs by forwarding a fixed amount of...
Upgraded Q -> M from 205 [1655579891083]
Judge has assessed an item in Issue 205 as Medium risk. The relevant finding follows: transfer and send methods are used inside the codebase. Since these methods use 2300 gas stipend which is not adjustable,it may likely to get broken when calling a contract's fallback function if any contract...
Upgraded Q -> M from 117 [1655579798819]
Judge has assessed an item in Issue 117 as Medium risk. The relevant finding follows: Don't use send / transfer to send ETH This is low severity but you should avoid these and use call --- The text was updated successfully, but these errors were encountered: All reactions...
Upgraded Q -> M from 270 [1655579826704]
Judge has assessed an item in Issue 270 as Medium risk. The relevant finding follows: Gas stipend for payable.send may be too low for contract wallets ETH withdrawals in both the minter and token contracts use payableaddress.send to transfer ether to the vault address. If the configured vault is ...