Skip to content
OpenAdvisories

Package · npm

@nfid/embed

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    GHSA-84c3-j8r2-mcm8

    @nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys

    ### Problem User sessions in the @nfid/embed SDK with Ed25519 keys are vulnerable due to a compromised private key `535yc-uxytb-gfk7h-tny7p-vjkoe-i4krp-3qmcl-uqfgr-cpgej-yqtjq-rqe`. This exposes users to potential loss of funds on ledgers and unauthorized acc…

    @nfid/embed npm