Incorrect Account Used for Signing

Overview Versions of eth-ledger-bridge-keyring prior to 0.2.1 may use incorrect accounts for signing transactions. The vulnerability impacts cases where the user signs a personal message or transaction without first adding the account. This includes cases where the user has already added the...

GHSA-VG44-FW64-CPJX Incorrect Account Used for Signing

Impact Anybody using this library to sign with a BIP44 account other than the first account may be affected. If a user is signing with the first account i.e. the account at index 0, or with the legacy MEW/MyCrypto HD path, they are not affected. The vulnerability impacts cases where the user sign...

PT-2020-21518

Name of the Vulnerable Software and Affected Versions eth-ledger-bridge-keyring versions prior to 0.2.1 @metamask/eth-ledger-bridge-keyring versions prior to 0.2.2 Description The issue affects users who sign with a BIP44 account other than the first account. It impacts cases where a user signs a...