| Package | Affected versions | Patched versions |
|---|---|---|
| slp-validate | < 1.2.2 | 1.2.2 |
| slp-validate | < 1.2.2 | 1.2.2 |
In the npm package named "slp-validate", versions prior to 1.2.2 are vulnerable to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification.
npm package "slp-validate" has been patched and is published and tagged as version 1.2.2.
Upgrade to slp-validate 1.2.2.
If you have any questions or comments about this advisory please open an issue in the slp-validate repository.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free