Vulnerability Database
Blog
FAQ
Docs
GHSA-7w6p-rwhg-7h3g
Suggest an improvement
Source
https://github.com/advisories/GHSA-7w6p-rwhg-7h3g
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-7w6p-rwhg-7h3g/GHSA-7w6p-rwhg-7h3g.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7w6p-rwhg-7h3g
Aliases
CVE-2020-6638
Published
2022-05-24T17:07:02Z
Modified
2024-02-01T21:42:21.787591Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Calculator
Summary
Grin Insufficient Validation
Details
Grin through 2.1.1 has Insufficient Validation.
References
https://nvd.nist.gov/vuln/detail/CVE-2020-6638
https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-6638.md
https://github.com/mimblewimble/grin/compare/v2.1.1...v3.0.0
Affected packages
crates.io
/
grin
Package
Name
grin
View open source insights on deps.dev
Purl
pkg:cargo/grin
Affected ranges
Type
SEMVER
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
3.0.0
GHSA-7w6p-rwhg-7h3g - OSV