Description
Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | grin | >= 3.0.0, < 4.0.0 | 4.0.0 | GHSA-p75g-gcv5-42qg |
High · 7.5
CVE-2020-15899
EUVD-2022-4702GHSA-p75g-gcv5-42qg
Grin insufficient data validation
Published Jul 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre