Description
A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions >1.0.0 have been patched.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| simpleledger | slp-validate | 1.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | slp-validate | >= 1.0.0, < 1.0.1 | 1.0.1 | GHSA-wmx6-vxcf-c3gr |