CVE-2023-38698
1 advisory.
npm/@ensdomains/ens-contracts CVE-2023-38698: medium 4.9, EPSS 0.85%
.eth registrar controller can shorten the duration of registered names
Action: Upgrade @ensdomains/ens-contracts to 0.0.22 or later.
npm i @ensdomains/ens-contracts@0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: GHSA-rrxv-q8m4-wch3
- https://github.com/ensdomains/ens-contracts/security/advisories/GHSA-rrxv-q8m4-wch3
- https://nvd.nist.gov/vuln/detail/CVE-2023-38698
- https://github.com/ensdomains/ens-contracts/commit/e6b136e979084de3761c125142620304173990ca
- https://github.com/ensdomains/ens-contracts
- https://github.com/ensdomains/ens-contracts/blob/master/contracts/ethregistrar/BaseRegistrarImplementation.sol#L171
CVE-2023-38698 · published · modified · JSON