{"action":"Upgrade stellar-sdk to 8.2.3 or later.","affected":[{"fixed":"8.2.3","introduced":"0"}],"component":"stellar-sdk","cve_ids":["CVE-2021-32738"],"ecosystem":"npm","epss":0.00597,"exploited":false,"fixed_versions":["8.2.3"],"ghsa_id":"GHSA-6cgh-hjpw-q3gq","id":"tcs_01M5KF6PC579ZT39AFZNECZPEP","modified_at":"2026-07-08T06:29:28.803567951Z","published_at":"2021-07-02T19:20:33Z","references":["https://osv.dev/vulnerability/GHSA-6cgh-hjpw-q3gq","https://github.com/stellar/js-stellar-sdk/security/advisories/GHSA-6cgh-hjpw-q3gq","https://nvd.nist.gov/vuln/detail/CVE-2021-32738","https://github.com/stellar/js-stellar-sdk/commit/6f0bb889c2d10b431ddd5f4a1bcdd519c80430b3","https://github.com/stellar/js-stellar-sdk/releases/tag/v8.2.3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6cgh-hjpw-q3gq","url":"https://osv.dev/vulnerability/GHSA-6cgh-hjpw-q3gq"}],"summary":"Utils.readChallengeTx does not verify the server account signature"}