Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@ensdomains/ens-contracts

2 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium, 1 low
Registry
npm

Advisories 2

  • ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation

    Affected: through 1.6.2.

  • CVE-2023-38698Medium 4.9

    .eth registrar controller can shorten the duration of registered names

    Affected: fixed in 0.0.22.