| Package | Affected versions | Patched versions |
|---|---|---|
| slp-validate | = 1.0.0 | |
| slp-validate | ≥ 1.0.0, < 1.0.1 | 1.0.1 |
Versions of slp-validate prior to 1.0.1 are vulnerable to a validation bypass. Bitcoin scripts may cause the validation result from slp-validate to differ from the specified SLP consensus. This allows an attacker to create a Bitcoin script that causes a hard-fork from the SLP consensus.
Upgrade to version 1.0.1 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free