Skip to content
OpenAdvisories

Package · npm

@bsv/wallet-toolbox-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    CVE-2026-56744

    `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage)

    `@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@bsv/wallet-toolbox-mobile` provide client-focused distributions for standard and mobile applications using wallet storage services. A vulner…

    bsv-blockchain @bsv/wallet-toolbox-client @bsv/wallet-toolbox @bsv/wallet-toolbox-mobile npm