Homepage
About Snyk

@liquity/contracts@1.0.0 vulnerabilities

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @liquity/contracts package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Improper Input Validation

@liquity/contracts is a Part of Liquity monorepo containing the contracts, SDK and Dev UI frontend.

Affected versions of this package are vulnerable to Improper Input Validation. TCR is temporarily miscalculated in the batchLiquidateTroves function during Recovery Mode. The bug lies in batchLiquidateTroves of TroveManager.

How to fix Improper Input Validation?

There is no fixed version for @liquity/contracts.

*
Go back to all versions of this package