sgbett

Products

ProductCVEsExploitedLatest
bsv-ruby-sdk2–Apr 9, 2026
bsv-sdk1–Apr 9, 2026
bsv-wallet1–Apr 9, 2026
secp256k1-native1–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-63410 Medium 5.9 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication 0.3%
  • CVE-2026-40070 High 8.1 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) 0.1%
  • CVE-2026-40070 High 8.1 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) 0.1%
  • CVE-2026-40070 High 8.1 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) 0.1%
  • CVE-2026-40069 High 7.5 bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts 0.3%