Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
References:GSA_kwCzR0hTQS1wNzVnLWdjdjUtNDJxZ84AAlex
Grin insufficient data validation
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
cargo:grin
PURL:
pkg:cargo/grin
|
>= 3.0.0, < 4.0.0 | 4.0.0 | |
Affected Version RangesAll affected versions3.0.0, 3.1.0, 3.1.1 All unaffected versions0.4.0, 0.4.2, 0.5.0, 0.5.1, 1.0.0, 1.0.3, 1.1.0, 2.0.0, 2.1.0, 4.0.1, 4.0.2, 4.1.0, 4.1.1, 5.0.0, 5.0.1, 5.0.4, 5.1.0, 5.1.2, 5.2.0, 5.3.0, 5.3.1, 5.3.3 |
|||