@ensdomains/ens-contracts vulnerabilities (npm)

2 vulnerabilities.

• @ensdomains/ens-contracts npm ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation CVE-2026-22866 2.7 LowFebruary 25, 2026
• @ensdomains/ens-contracts npm .eth registrar controller can shorten the duration of registered names CVE-2023-38698 Fix available 4.9 MediumAugust 1, 2023