Vulnerabilidades en bitcoinjs
3 resultadosCVE-2024-49364HIGHtiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environmentEPSS 0.4%CVE-2024-49365HIGHtiny-secp256k1 allows for verify() bypass when running in bundled environmentEPSS 0.2%CVE-2026-107846CRITICALbitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction listEPSS 0.2%