| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ElrondNetwork/elrond-go | < 1.3.34 | 1.3.34 |
| elrond go | < 1.3.34 | 1.3.34 |
Anyone who uses elrond-go to process blocks (historical or actual) that contains a transaction like this: MultiESDTNFTTransfer@01@54444558544b4b5955532d323631626138@00@0793afc18c8da2ca@ (mind the missing function name after the last @)
Basic functionality like p2p messaging, storage, API requests and such are unaffected.
Patch v1.3.34 or higher
No workarounds
For future reference, one can observe the following integration test: [provide the link to the integration test]
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free