CVE-2021-41138
1 advisory.
crates.io/pallet-ethereum CVE-2021-41138: medium 5.3, EPSS 1.38%
Validity check missing in Frontier
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vj62-g63v-f8mf
- https://github.com/paritytech/frontier/security/advisories/GHSA-vj62-g63v-f8mf
- https://nvd.nist.gov/vuln/detail/CVE-2021-41138
- https://github.com/paritytech/frontier/pull/495
- https://github.com/paritytech/frontier/pull/497
- https://github.com/paritytech/frontier/commit/146bb48849e5393004be5c88beefe76fdf009aba
- https://github.com/polkadot-evm/frontier
CVE-2021-41138 · published · modified · JSON