npm/@nfid/embed: critical 9.1
@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys
Action: Upgrade @nfid/embed to 0.10.1-alpha.6 or later.
npm i @nfid/embed@0.10.1-alpha.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 0.10.1-alpha.6 | - |
Fixed versions
| 0.10.1-alpha.6 |
Sources
- osv: GHSA-84c3-j8r2-mcm8
- https://github.com/dfinity/agent-js/security/advisories/GHSA-c9vv-fhgv-cjc3
- https://github.com/internet-identity-labs/sdk-ts/security/advisories/GHSA-84c3-j8r2-mcm8
- https://github.com/internet-identity-labs/sdk-ts
published · modified · JSON