Candid vulnerabilities

1 known vulnerability in Candid from Internet Computer. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Candid: Loop with Unreachable Exit Condition

  CVE-2023-6245Dec 8, 2023Internet ComputerEPSS 1.21%

  The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { * ; empty }` and the canister interface expects `record { * }` then the Rust candid decoder treats empty as