@liquity/contracts@1.0.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the @liquity/contracts package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • L
Improper Input Validation

@liquity/contracts is a Part of Liquity monorepo containing the contracts, SDK and Dev UI frontend.

Affected versions of this package are vulnerable to Improper Input Validation. TCR is temporarily miscalculated in the batchLiquidateTroves function during Recovery Mode. The bug lies in batchLiquidateTroves of TroveManager.

How to fix Improper Input Validation?

There is no fixed version for @liquity/contracts.

*