Vulnerabilities

TI-2020-11903 CVE-2020-15130 · GHSA-cc2p-4jhr-xhhx

False-positive validity for NFT1 genesis transactions in SLPJS

LOW 35

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01036 Published 2020-07-30 Fixed in 0.27.4 CWE-697

TI-2020-08945 CVE-2020-11071 · GHSA-jc83-cpf9-q7c6

False-negative validation results in MINT transactions with invalid baton

LOW 39

SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00932 Published 2020-05-12 Fixed in 0.27.2 CWE-697

TI-2019-12543 CVE-2019-16762 · GHSA-425c-ccf3-3jrr

Validator parsing discrepancy due to string encoding in NPM slpjs

LOW 29

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.01096 Published 2019-11-15 Fixed in 0.21.4 CWE-20

Vulnerabilities

Filters

False-positive validity for NFT1 genesis transactions in SLPJS

False-negative validation results in MINT transactions with invalid baton

Validator parsing discrepancy due to string encoding in NPM slpjs