Homepage
About Snyk

@uniswap/universal-router@1.0.1 vulnerabilities

Smart contracts for Universal Router

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @uniswap/universal-router package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Improper Access Control

@uniswap/universal-router is a Smart contracts for Universal Router

Affected versions of this package are vulnerable to Improper Access Control such that a recipient can easily reenter the contract (by calling transfer or sweep inside its onERC721Received handler) and drain the entire fund's amount.

How to fix Improper Access Control?

Upgrade @uniswap/universal-router to version 1.1.0 or higher.

<1.1.0
Go back to all versions of this package