Vulnerabilities

TI-2026-85137 CVE-2026-107846

bitcoinjs-lib block root check accepts duplicated transaction lists

LOW 39

bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0018 Published 2026-11-04 Fixed in 5.2.1, 6.1.8 +1 CWE-354

TI-2024-32952 CVE-2024-49364 · GHSA-7mc2-6phr-23xc

HIGH 76

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00365 Published 2025-07-01 Fixed in 1.1.7 CWE-522

TI-2024-32953 CVE-2024-49365 · GHSA-5vhg-9xg4-cv9m

HIGH 76

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00247 Published 2025-07-01 Fixed in 1.1.7 CWE-347