crates.io/evm CVE-2022-39354: medium 5.9, EPSS 0.68%

Incorrect is_static parameter for custom stateful precompiles in SputnikVM (evm)

Action: Upgrade evm to 0.36.0 or later.

cargo update -p evm --precise 0.36.0

Affected

Fixed versions

Sources

• osv: GHSA-hhc4-47rh-cr34
• https://github.com/rust-blockchain/evm/security/advisories/GHSA-hhc4-47rh-cr34
• https://nvd.nist.gov/vuln/detail/CVE-2022-39354
• https://github.com/rust-blockchain/evm/pull/133
• https://github.com/rust-blockchain/evm
• https://rustsec.org/advisories/RUSTSEC-2022-0083.html

CVE-2022-39354 · published 2022-10-25T22:27:21Z · modified 2023-11-08T04:10:19.736914Z · JSON