bsv-blockchain
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| @bsv/wallet-toolbox | 1 | – | Sep 24, 2026 |
| @bsv/wallet-toolbox-client | 1 | – | Sep 24, 2026 |
| @bsv/wallet-toolbox-mobile | 1 | – | Sep 24, 2026 |
| ts-sdk | 1 | – | Feb 18, 2026 |
Exploited and recent CVEs
- CVE-2026-56744 `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage) 0.4%
- CVE-2026-56744 `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage) 0.4%
- CVE-2026-56744 `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage) 0.4%
- CVE-2025-69287 BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability 0.3%