Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 35

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01036 Published 2020-07-30 Fixed in 0.27.4 CWE-697
Priority LOW 35

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01036 Published 2020-07-30 Fixed in 1.2.2 CWE-697
Priority LOW 29

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package.

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.01096 Published 2019-11-15 Fixed in 0.21.4 CWE-20