Submitted by nirlin, also found by sayan.
There is no deadline parameter in these two functions. This missing feature enables pending transactions to be maliciously executed at a later point.
Consider following scnerio:
An even worse way this issue can be maliciously exploited is through MEV:
Add deadline param
bghughes (Rubicon) disputed, disagreed with severity and commented:
HickupHH3 (judge) commented:
