Skip to content
OpenAdvisories

Package · PyPI

electrum

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions

    Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and display an…