This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.

Crate cw-multi-test

Dependencies

(11 total, 7 outdated, 1 possibly insecure)

CrateRequiredLatestStatus
 anyhow^1.0.751.0.99up to date
 cosmwasm-std ⚠️^1.4.03.0.2out of date
 cw-storage-plus^1.1.03.0.1out of date
 cw-utils^1.0.13.0.0out of date
 derivative^2.2.02.2.0up to date
 itertools^0.11.00.14.0out of date
 prost^0.12.00.14.1out of date
 schemars^0.8.131.0.4out of date
 serde^1.0.1881.0.225up to date
 sha2^0.10.70.10.9up to date
 thiserror^1.0.482.0.16out of date

Dev dependencies

(1 total, all up-to-date)

CrateRequiredLatestStatus
 ecdsa^0.16.80.16.9up to date

Security Vulnerabilities

cosmwasm-std: Arithmetic overflows in cosmwasm-std

RUSTSEC-2024-0338

Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations.

Affected functions:

  • Uint{256,512}::pow / Int{256,512}::pow
  • Int{256,512}::neg

Affected if overflow-checks = true is not set:

  • Uint{64,128}::pow / Int{64,128}::pow
  • Int{64,128}::neg