Skip to content
OpenAdvisories

Package · npm

web3

1 known vulnerabilities.

1 result · Feed

  • Low 3.3

    Insecure Credential Storage in web3

    All versions of `web3` are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this …