Skip to content
OpenAdvisories

Vendor

bsv-blockchain

2 known vulnerabilities.

Products

ts-sdk 1 @bsv/wallet-toolbox 1 @bsv/wallet-toolbox-client 1 @bsv/wallet-toolbox-mobile 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-56744

    `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage)

    `@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@bsv/wallet-toolbox-mobile` provide client-focused distributions for standard and mobile applications using wallet storage services. A vulner…

    bsv-blockchain @bsv/wallet-toolbox-client @bsv/wallet-toolbox @bsv/wallet-toolbox-mobile npm