Cashu NUTs 数据伪造问题漏洞

Cashu NUTs is an open-source protocol specification developed by Cashu. Versions prior to Cashu NUTs 6.2.3 and 5.4.31 contained a data manipulation vulnerability. This vulnerability stemmed from the fact that access tokens accepted endpoints in v1 allowed JWTs signed with any key, without verifyi...

Cashu NUTs 安全漏洞

Cashu NUTs is a Cashu protocol specification open-sourced by Cashu. A security vulnerability exists in versions of Cashu NUTs prior to 0.18.0, which stems from an unvalidated preimage size that could lead to an attacker populating a mint's database and disk...