cairo-lang@0.6.2 vulnerabilities

Compiler and runner for the Cairo language

Direct Vulnerabilities

Known vulnerabilities in the cairo-lang package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Access Control Bypass

cairo-lang is a Compiler and runner for the Cairo language

Affected versions of this package are vulnerable to Access Control Bypass via 'uint256_unsigned_div_rem', which allows a malicious prover to return a wrong result.

How to fix Access Control Bypass?

Upgrade cairo-lang to version 0.10.0 or higher.

[,0.10.0)