~ / search / GHSA-p75g-gcv5-42qg

GHSA-p75g-gcv5-42qg

Grin insufficient data validation

Source: GitHub Advisory Database (reviewed) High CVE-2020-15899

Packages

EcosystemPackageAffectedFixed in
crates.io grin >= 3.0.0, < 4.0.0 4.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

References

External links from the advisory. They lead to third-party sites.