GHSA-3qwc-47jf-5rf7: eth-abi is vulnerable to recursive DoS

March 5, 2024 (updated September 1, 2026)

This is related to recent ZST stuff (https://github.com/ethereum/eth-abi/security/advisories/GHSA-rqr8-pxh7-cq3g), but it’s a different one. Basically a recursive pointer issue

from eth_abi import decode

References

github.com/ApeWorX/eth-abi/pull/226
github.com/advisories/GHSA-3qwc-47jf-5rf7
github.com/ethereum/eth-abi/commit/82c1ad37a866472562d81fedaef0f4fed0a08269
github.com/ethereum/eth-abi/security/advisories/GHSA-3qwc-47jf-5rf7

Code Behaviors & Features

Detect and mitigate GHSA-3qwc-47jf-5rf7 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →