SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations.
CVSS 3.1HIGH 8.6·Network·No auth·No interaction·EPSS 0.00932·Published 2020-05-12·Fixed in 0.27.2CWE-697
In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01036·Published 2020-07-30·Fixed in 0.27.4CWE-697
A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package.
CVSS 3.1MEDIUM 6.1·Network·High privileges·User interaction·EPSS 0.01096·Published 2019-11-15·Fixed in 0.21.4CWE-20
