Skip to content
OpenAdvisories

Package · crates.io

zaino-state

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-3whf-vgf2-9w6g

    zaino-state has a Non-Finalized State Reorg — No Cycle Detection or Depth Limit

    ### Summary `NonFinalizedState::handle_reorg` is a recursive, unbounded async function that traverses parent blocks until it finds a common ancestor on the main chain. It has **no recursion depth limit** and **no cycle detection**. A malicious or buggy valida…

    zaino-state crates.io