GHSA-c7pr-343r-5c46
missing clamps for decimal args in external functions
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
The following code does not properly validate that its input is in bounds.
```python
@external
def foo(x: decimal) -> decimal:
return x
```
### Patches
0.3.0 / #2447
### Workarounds
Don't use decimal args
References
External links from the advisory. They lead to third-party sites.