WS-2020-0046

The ""verifyVerifiablePresentation"" https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-presentation-signer.tsL97 method check the cryptographic integrity of the Verifiable Presentation, but it does not check if the ""credentialSubject.id""...

PT-2020-21272

Name of the Vulnerable Software and Affected Versions vp-toolkit versions prior to 0.2.2 Description The verifyVerifiablePresentation method does not check if the credentialSubject.id DID matches the signer of the VP proof, impacting the verifier. Recommendations For versions prior to 0.2.2, as a...