WS-2019-0215

zencashjs versions before 1.2.0. has a oss of funds when used with cryptocurrency wallets vulnerability...

Undefined Behavior in zencashjs

Versions of zencashjs prior to 1.2.0 may cause loss of funds when used with cryptocurrency wallets. The package relies on a string comparison of the first two characters of a Horizen address to determine the destination address type of a transaction P2PKH or P2SH. Due to the base58 address prefix...

GHSA-XFRC-7MJ2-5XH9 Undefined Behavior in zencashjs

Versions of zencashjs prior to 1.2.0 may cause loss of funds when used with cryptocurrency wallets. The package relies on a string comparison of the first two characters of a Horizen address to determine the destination address type of a transaction P2PKH or P2SH. Due to the base58 address prefix...

PT-2020-21589

Name of the Vulnerable Software and Affected Versions zencashjs versions prior to 1.2.0 Description The issue affects the handling of cryptocurrency transactions, specifically with Horizen addresses. It relies on string comparison of the first two characters of an address to determine the...

Undefined Behavior

Overview Versions of zencashjs prior to 1.2.0 may cause loss of funds when used with cryptocurrency wallets. The package relies on a string comparison of the first two characters of a Horizen address to determine the destination address type of a transaction P2PKH or P2SH. Due to the base58 addre...