DA0-DA0 / dao-contracts

CosmWasm smart contracts for Interchain DAOs.
https://docs.daodao.zone
BSD 3-Clause "New" or "Revised" License
202 stars 132 forks source link

Update serde-json-wasm to fix low security vulnerability #807

Closed NoahSaso closed 3 months ago

NoahSaso commented 4 months ago

https://github.com/CosmWasm/serde-json-wasm/releases/tag/v0.5.2

serde-json-wasm patched a bug recently that causes deeply nested JSON to overflow the stack, which would cause a runtime error and prevent a contract from executing. this would only cause problems if someone submits an extremely nested JSON message in a proposal, which is unlikely and the user can avoid it, but it's still good to fix. no contracts are at risk of being bricked.