npm/@keep-network/tbtc-v2: high 7.5
@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script
Action: Upgrade @keep-network/tbtc-v2 to 1.8.2 or later.
npm i @keep-network/tbtc-v2@1.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2 | - |
Fixed versions
| 1.8.2 |
Sources
- osv: GHSA-8986-v76q-8vr2
- https://github.com/threshold-network/tbtc-v2/security/advisories/GHSA-8986-v76q-8vr2
- https://bugs.immunefi.com/magnus/672/projects/502/bug-bounty/reports/55982
- https://github.com/keep-network/bitcoin-spv/blob/856849612ef49114af18c0f407eaa74afc2ee4be/solidity/contracts/BTCUtils.sol#L610-L612
- https://github.com/threshold-network/tbtc-v2
published · modified · JSON