simpleledger

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

simpleledger records in CISA KEV

No simpleledger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Slp-validate 3 records LOW Slpjs 3 records LOW Electron-cash-slp 1 record MEDIUM

Records

3 records in Slp-validate · all components

TI-2020-08946 CVE-2020-11072 · GHSA-4w97-57v2-3w44

False-negative validation results in MINT transactions with invalid baton

LOW 39

In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01036 Published 2020-05-12 Fixed in 1.2.1 CWE-697

TI-2020-11904 CVE-2020-15131 · GHSA-6jmr-jfh7-xg3h

False-positive validity for NFT1 genesis transactions in SLP Validate

LOW 35

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01036 Published 2020-07-30 Fixed in 1.2.2 CWE-697

TI-2019-12542 CVE-2019-16761 · GHSA-wmx6-vxcf-c3gr

Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0

LOW 29

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the [email protected] npm package.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00993 Published 2019-11-15 Fixed in 1.0.1 CWE-20

Open these records in search →

Critical	0
High	5
Medium	2
Low	0
No CVSS	0