Skip to content
OpenAdvisories

Package · npm

vp-toolkit

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    GHSA-p94w-42g3-f7h4

    Holder can (re)create authentic credentials after receiving a credential in vp-toolkit

    ### Impact The [`verifyVerifiableCredential()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-credential-signer.ts#L57) method check the cryptographic integrity of the Verifiable Credential, but it does not check…

    vp-toolkit npm
  • High —
    GHSA-ff5x-w9wg-h275

    Holder can generate proof of ownership for credentials it does not control in vp-toolkit

    ### Impact The [`verifyVerifiablePresentation()`](https://github.com/rabobank-blockchain/vp-toolkit/blob/master/src/service/signers/verifiable-presentation-signer.ts#L97) method check the cryptographic integrity of the Verifiable Presentation, but it does not…

    vp-toolkit npm