Agent Dart
Approved changes feed: RSS · Atom
cpe:2.3:a:astroxnetwork:agent_dart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Astroxnetwork (e9ea72ec-0b5b-5608-95b0-c69a4570d77b) |
|---|---|
| Product | Agent Dart (38423d70-6b13-56c3-b197-f45bfe86c4d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-48915 |
vulnerable | 2026-06-08 06:50:11.692993 |
Agent Dart missing certificate verification checks
Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in `lib/agent/certificate.dart` does not occur properly. During the delegation verification in the `_checkDelegation` function, the canister_ranges aren't verified. The impact of not checking the canister_ranges is that a subnet can sign canister responses in behalf of another subnet. The certificate’s timestamp, i.e /time path, is also not verified, meaning that the certificate effectively has no expiration time. Version 1.0.0-dev.29 implements appropriate certificate verification.
Published: 2024-10-15T17:12:31.400Z
Updated: 2024-11-21T16:53:44.140Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.