Skip to content
OpenAdvisories

Package · npm

insight-api

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Insight API transaction broadcast endpoint can result in Full Path Disclosure

    Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.