Advisory Database
  • Advisories
  • Dependency Scanning
  1. golang
  2. ›
  3. github.com/ElrondNetwork/elrond-go
  4. ›
  5. GMS-2022-3941

GMS-2022-3941: Duplicate of ./go/github.com/ElrondNetwork/elrond-go/CVE-2022-36058.yml

September 1, 2022

It is possible to call on an SC address with a missing function name.

References

  • github.com/ElrondNetwork/elrond-go/blob/8e402fa6d7e91e779980122d3798b2bf50892945/integrationTests/vm/txsFee/asyncESDT_test.go
  • github.com/ElrondNetwork/elrond-go/commit/cb487fd7be2a2077638eb34ae771a73630c870c7
  • github.com/ElrondNetwork/elrond-go/security/advisories/GHSA-qf7j-25g9-r63f
  • github.com/advisories/GHSA-qf7j-25g9-r63f

Code Behaviors & Features

Detect and mitigate GMS-2022-3941 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions up to 1.3.33

Fixed versions

  • v1.3.34

Solution

Upgrade to version 1.3.34 or above.

Weakness

  • CWE-453: Insecure Default Variable Initialization

Source file

go/github.com/ElrondNetwork/elrond-go/GMS-2022-3941.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:15:18 +0000.