Skip to content

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic offsets and can spoof the review UI #1007

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cedelavergne-ledger merged 1 commit into from
May 11, 2026
+30 −16

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic …

4ddcc8a
Select commit
Loading
Failed to load commit list.
Merged

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic offsets and can spoof the review UI #1007

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic …
4ddcc8a
Select commit
Loading
Failed to load commit list.
Ledger Wiz (CSPM & secret detection) / Wiz SAST Scanner succeeded May 11, 2026 in 20s

Wiz SAST Scanner

Wiz has not detected any SAST Findings

View scan details in Wiz

View more details on Ledger Wiz (CSPM & secret detection)