Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
The fuels-ts typescript SDK has no awareness of to-be-spent transactions
Vulnerability Description
fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the `fund` function in `fuels-ts/packages/account/src/account.ts` gets the needed ressources statelessly with the function `getResourcesToSpend` without taking into consideration already used UTXOs. This issue will lead to unexpected SDK behaviour, such as a transaction not getting included in the `txpool` / in a block or a previous transaction silently getting removed from the `txpool` and replaced with a new one.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
输入验证不恰当
Vulnerability Title
fuels-ts 输入验证错误漏洞
Vulnerability Description
fuels-ts是Fuel Labs开源的一个与 Fuel v2 交互的库。 fuels-ts存在输入验证错误漏洞，该漏洞源于“fuels-ts/packages/account/src/account.ts”中的“fund”函数使用函数“getResourcesToSpend”无状态地获取所需的资源。
CVSS Information
N/A
Vulnerability Type
N/A