npm/eth-ledger-bridge-keyring: high 7.5
Incorrect Account Used for Signing
Action: Upgrade eth-ledger-bridge-keyring to 0.2.1 or later.
npm i eth-ledger-bridge-keyring@0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-vg44-fw64-cpjx
- https://github.com/MetaMask/eth-ledger-bridge-keyring/security/advisories/GHSA-vg44-fw64-cpjx
- https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/14
- https://github.com/MetaMask/eth-ledger-bridge-keyring/commit/f32e529d13a53e55f558d903534d631846dc26ce
- https://github.com/advisories/GHSA-vg44-fw64-cpjx
- https://snyk.io/vuln/SNYK-JS-ETHLEDGERBRIDGEKEYRING-561121
- https://www.npmjs.com/advisories/1497
- https://www.npmjs.com/advisories/1498
published · modified · JSON