2 matches found
agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`
Impact The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key. When no seed value is provided, it is expected that the library generates the secret key using...
agent-js Security Feature Issue Vulnerability
agent-js is a collection of libraries and tools that use JavaScript to build software around Internet computers. A security vulnerability exists in agent-js versions v0.20.0-beta.0 through 1.0.1, which stems from the presence of an information disclosure vulnerability...