Go/github.com/babylonlabs-io/finality-provider: high
Finality Provider vulnerable to anti-slashing bypassing due to misconfiguration
Action: Upgrade github.com/babylonlabs-io/finality-provider to 1.0.4 or later.
go get github.com/babylonlabs-io/finality-provider@v1.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4 | - |
Fixed versions
| 1.0.4 |
Sources
- osv: GHSA-4jmp-x7mh-rgmr
- https://github.com/babylonlabs-io/finality-provider/security/advisories/GHSA-4jmp-x7mh-rgmr
- https://github.com/babylonlabs-io/finality-provider/commit/721bf5b7a271ada1679a67496c9bc3516c339390
- https://github.com/babylonlabs-io/finality-provider
published · modified · JSON