Vulnerabilities

TI-2020-11904 CVE-2020-15131 · GHSA-6jmr-jfh7-xg3h

False-positive validity for NFT1 genesis transactions in SLP Validate

LOW 35

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01036 Published 2020-07-30 Fixed in 1.2.2 CWE-697

TI-2020-08946 CVE-2020-11072 · GHSA-4w97-57v2-3w44

False-negative validation results in MINT transactions with invalid baton

LOW 39

In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01036 Published 2020-05-12 Fixed in 1.2.1 CWE-697

TI-2019-12542 CVE-2019-16761 · GHSA-wmx6-vxcf-c3gr

Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0

LOW 29

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the [email protected] npm package.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.00993 Published 2019-11-15 Fixed in 1.0.1 CWE-20

Vulnerabilities

Filters

False-positive validity for NFT1 genesis transactions in SLP Validate

False-negative validation results in MINT transactions with invalid baton

Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0