CVE-2022-48216
1 advisory.
npm/@uniswap/universal-router CVE-2022-48216: high 7.5, EPSS 0.78%
Uniswap Universal Router Incorrect Authorization vulnerability
Action: Upgrade @uniswap/universal-router to 1.1.0 or later.
npm i @uniswap/universal-router@1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-7m37-cx35-qgmr
- https://nvd.nist.gov/vuln/detail/CVE-2022-48216
- https://github.com/Uniswap/universal-router/pull/189
- https://github.com/Uniswap/universal-router/commit/d82c6685ef566d9b280651c99f4b93a8454c08a8
- https://github.com/Uniswap/universal-router
- https://github.com/Uniswap/universal-router/compare/v1.0.1...v1.1.0
- https://media.dedaub.com/uniswap-bug-bounty-1625d8ff04ae
- https://twitter.com/dedaub/status/1610058814094450694
CVE-2022-48216 · published · modified · JSON