CVE-2020-11072 False-negative validation results in MINT transactions with invalid baton

In SLP Validate npm package slp-validate before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. Th...

bch-wallet-plugin-postoffice (>=1.0.0 <=1.0.8), bitcoin-wallet-api (>=0.0.5 <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5 <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

False-negative validation results in MINT transactions with invalid baton

Impact Users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. Patches npm package slpjs has been patched and published a...

GHSA-JC83-CPF9-Q7C6 False-negative validation results in MINT transactions with invalid baton

Impact Users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. Patches npm package slpjs has been patched and published a...

CVE-2020-11071

CVE-2020-11071 concerns the SLPJS npm package (slpjs) prior to version 0.27.2, describing a vulnerability in which false‑negative validation outcomes for MINT transaction operations could permit spending of affected tokens, potentially destroying a user’s minting baton. The issue is fixed in vers...

CVE-2020-11071 False-negative validation results in MINT transactions with invalid baton

SLPJS npm package slpjs before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting...

Unspecified vulnerability in slpjs

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. A security vulnerability exists in versions of slpjs prior to 0.27.2 that can be exploited by an attacker to prevent users from generating tokens tokens...

slpjs Input Validation Error Vulnerability

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. slpjs A vulnerability exists in input validation errors in versions prior to 0.21.4. The vulnerability stems from a network system or product that does not properly validate input data. An attacker could...

slpjs input validation error vulnerability

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. An input validation error vulnerability exists in versions of slpjs prior to 0.21.4, which can be exploited by attackers to create specially crafted bitcoin scripts...

Authorization Bypass

slpjs is vulnerable to authorization bypass. An attacker is able to create a malicious Bitcoin script to cause a hard-fork from the SLP concensus due to difference between the specified SLP concensus and the validation result of the slpjs npm package which causes a discrepancy in the simple ledge...

CVE-2019-16762 Validator parsing discrepancy due to string encoding in NPM slpjs

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to...

GHSA-425C-CCF3-3JRR Critical severity vulnerability that affects slpjs

Validator parsing discrepancy due to string encoding Impact A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a...

Critical severity vulnerability that affects slpjs

Validator parsing discrepancy due to string encoding Impact A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a...