npm/vp-toolkit: high
Holder can generate proof of ownership for credentials it does not control in vp-toolkit
Action: Upgrade vp-toolkit to 0.2.2 or later.
npm i vp-toolkit@0.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.2 | - |
Fixed versions
| 0.2.2 |
Sources
- osv: GHSA-ff5x-w9wg-h275
- https://github.com/rabobank-blockchain/vp-toolkit/security/advisories/GHSA-ff5x-w9wg-h275
- https://github.com/rabobank-blockchain/vp-toolkit/issues/14
- https://github.com/rabobank-blockchain/vp-toolkit/commit/18a7db84d3265c6ffa10ef63eb37ae1bd4ba192b
published · modified · JSON