Skip to content

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic offsets and can spoof the review UI #1007

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cedelavergne-ledger merged 1 commit into from
May 11, 2026
+30 −16

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic …

4ddcc8a
Select commit
Loading
Failed to load commit list.
Merged

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic offsets and can spoof the review UI #1007

fix: ERC1155 safeBatchTransferFrom parser trusts unvalidated dynamic …
4ddcc8a
Select commit
Loading
Failed to load commit list.
Socket Security / Socket Security: Pull Request Alerts succeeded May 11, 2026 in 5s

Pull Request #1007 Alerts: Skipped

Report Status Message
PR #1007 Alerts ✅ Pull request contains no net changes to dependencies

Pull request alerts notify when new issues are detected between the diff of the pull request and it's target branch.

Details

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

View more details on Socket Security