Skip to content
OpenAdvisories

Package · npm

slp-validate

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2020-15131

    False-positive validity for NFT1 genesis transactions in SLP Validate

    In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly val…

    simpleledger slp-validate.js slp-validate npm
  • High 8.6
    CVE-2020-11072

    False-negative validation results in MINT transactions with invalid baton

    In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the d…

    simpleledger slp-validate slp-validate npm
  • Medium 5.7
    CVE-2019-16761

    Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0

    A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork fro…

    simpleledger slp-validate slp-validate npm