GHSA-5v93-9mqw-p9mh: Uncaught Panic in ORML Rewards Pallet
(updated )
A vulnerability in the add_share function of the Rewards pallet (part of the ORML repository) can lead to an uncaught Rust panic when handling user-provided input exceeding the u128 range.
References
- github.com/advisories/GHSA-5v93-9mqw-p9mh
- github.com/open-web3-stack/open-runtime-module-library
- github.com/open-web3-stack/open-runtime-module-library/commit/6720fcd92f44e5f204741b04fdef3b67b0fcf6bc
- github.com/open-web3-stack/open-runtime-module-library/pull/1016
- github.com/open-web3-stack/open-runtime-module-library/security/advisories/GHSA-5v93-9mqw-p9mh
Code Behaviors & Features
Detect and mitigate GHSA-5v93-9mqw-p9mh with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →