Skip to content
OpenAdvisories

Product · Internet Computer

Candid

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-6245

    Infinite decoding loop through specially crafted payload

    The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { * ; empty }` and the canister interface expects `record { * }` then the Rust candid decoder treats empty a…

    Internet Computer Candid candid crates.io