CVE-2021-32738
1 advisory.
npm/stellar-sdk CVE-2021-32738: medium 6.5, EPSS 0.51%
Utils.readChallengeTx does not verify the server account signature
Action: Upgrade stellar-sdk to 8.2.3 or later.
npm i stellar-sdk@8.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.2.3 | - |
Fixed versions
| 8.2.3 |
Sources
- osv: GHSA-6cgh-hjpw-q3gq
- https://github.com/stellar/js-stellar-sdk/security/advisories/GHSA-6cgh-hjpw-q3gq
- https://nvd.nist.gov/vuln/detail/CVE-2021-32738
- https://github.com/stellar/js-stellar-sdk/commit/6f0bb889c2d10b431ddd5f4a1bcdd519c80430b3
- https://github.com/stellar/js-stellar-sdk/releases/tag/v8.2.3
CVE-2021-32738 · published · modified · JSON