{"action":"Upgrade slp-validate to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"slp-validate","cve_ids":["CVE-2020-11072"],"ecosystem":"npm","epss":0.01036,"exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-4w97-57v2-3w44","id":"tcs_01M5KF1QCS0G1PTHY1F192NQZE","modified_at":"2026-09-10T03:48:46.238292861Z","published_at":"2020-05-12T00:45:24Z","references":["https://osv.dev/vulnerability/GHSA-4w97-57v2-3w44","https://github.com/simpleledger/slp-validate.js/security/advisories/GHSA-4w97-57v2-3w44","https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44","https://nvd.nist.gov/vuln/detail/CVE-2020-11072","https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-4w97-57v2-3w44","url":"https://osv.dev/vulnerability/GHSA-4w97-57v2-3w44"}],"summary":"False-negative validation results in MINT transactions with invalid baton"}