Skip to content
OpenAdvisories

Package · crates.io

bsv-rs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-mj2m-jxgv-r446

    KVStoreInterpreter::verify_signature_legacy answers true for every token and every key

    `KVStoreInterpreter::verify_signature_legacy(&PushDrop, &PublicKey)`, public and deprecated since 0.2.0 (the crate's first release), read neither argument and answered `true`. A KVStore token signed by nobody, a signed token checked against a key other than i…

    bsv-rs crates.io