Approved changes feed: RSS · Atom

cpe:2.3:a:fuellabs:fuels-ts:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFuellabs (d7d641df-3541-5fd3-8163-b0bef169bdeb)
ProductFuels Ts (bbb17850-cef4-5149-be98-b0266364ba89)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-41945 vulnerable 2026-06-08 06:43:55.721777 The fuels-ts typescript SDK has no awareness of to-be-spent transactions
LOW (3.1)
fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the `fund` function in `fuels-ts/packages/account/src/account.ts` gets the needed ressources statelessly with the function `getResourcesToSpend` without taking into consideration already used UTXOs. This issue will lead to unexpected SDK behaviour, such as a transaction not getting included in the `txpool` / in a block or a previous transaction silently getting removed from the `txpool` and replaced with a new one.
Published: 2024-07-30T19:42:06.663Z
Updated: 2024-08-02T04:54:31.279Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.