high7.5
CVE-2020-15899
Grin insufficient data validation
Impact
Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | grin | >= 3.0.0, < 4.0.0 | 4.0.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grin | Grin | from 3.0.0 before 4.0.0 |