CVE-2019-16762

Published November 15th, 2019

View on NVD ↗

CVSS v3

5.7

MEDIUM

CVSS v2

4.9

MEDIUM

Affected

PROJECT

Description

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.

simpleledger/slpjs

JavaScript library for Simple Ledger Protocol

GitHub