Description
A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ensdomains | @ensdomains/ens | < 0.4.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @ensdomains/ens | < 0.4.0 | 0.4.0 | GHSA-8f9f-pc5v-9r5h |