CVE-2019-16761

Published November 15th, 2019

View on NVD ↗

CVSS v3

5.7

MEDIUM

CVSS v2

4.9

MEDIUM

Affected

PROJECT

Description

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the [email protected] npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions >1.0.0 have been patched.

simpleledger/slp-validate.js

SLP validator with pre-broadcast validation and burn protection.

GitHub