Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.
CWE-667, CWE-667