Skip to content
OpenAdvisories

Package · crates.io

bip322

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    GHSA-5chw-87w3-j9cv

    BIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses

    Affected versions of `bip322` accepted a BIP-322 proof created with an attacker-controlled private key as a valid signature for an unrelated victim P2WPKH or P2SH-P2WPKH address, allowing complete authentication bypass in applications using `verify_simple`, `…

    bip322 crates.io