Closed GoVulnBot closed 1 year ago
Vulnerability in tool.
Change https://go.dev/cl/430359 mentions this issue: data/excluded: add GO-2022-0970.yaml for CVE-2022-36058
Change https://go.dev/cl/592774 mentions this issue: data/reports: unexclude 50 reports
Change https://go.dev/cl/607229 mentions this issue: data/reports: unexclude 20 reports (27)
CVE-2022-36058 references github.com/ElrondNetwork/elrond-go, which may be a Go module.
Description: Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-go to process blocks (historical or actual) could encounter a
MultiESDTNFTTransfer
transaction like this:MultiESDTNFTTransfer
with a missing function name. Basic functionality like p2p messaging, storage, API requests and such are unaffected. Version 1.3.34 contains a fix for this issue. There are no known workarounds.References:
See doc/triage.md for instructions on how to triage this report.