| Package | Affected versions | Patched versions |
|---|---|---|
| bcoin | = 2.2.0 | |
| bsock | ≤ 0.1.11 |
An issue was discovered in the bsock component of bcoin-org bcoin that allows remote attackers to obtain sensitive information via weak hashing algorithms in the component \vendor\faye-websocket.js.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free