CVE-2025-27611
1 advisory.
npm/base-x CVE-2025-27611: high 8.7, EPSS 0.45%
Homograph attack allows Unicode lookalike characters to bypass validation.
Action: Upgrade base-x to 3.0.11 or later.
npm i base-x@5.0.1npm i base-x@4.0.1npm i base-x@3.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.1 | - |
| 4.0.0 | 4.0.1 | - |
| 0 | 3.0.11 | - |
Fixed versions
| 5.0.1 | 4.0.1 | 3.0.11 |
Sources
- osv: GHSA-xq7p-g2vc-g82p
- nvd: CVE-2025-27611
- https://github.com/cryptocoinjs/base-x/security/advisories/GHSA-xq7p-g2vc-g82p
- https://github.com/cryptocoinjs/base-x/pull/86
- https://github.com/cryptocoinjs/base-x
CVE-2025-27611 · published · modified · JSON