{"action":"Upgrade slpjs to 0.27.2 or later.","affected":[{"fixed":"0.27.2","introduced":"0"}],"component":"slpjs","cve_ids":["CVE-2020-11071"],"ecosystem":"npm","epss":0.00932,"exploited":false,"fixed_versions":["0.27.2"],"ghsa_id":"GHSA-jc83-cpf9-q7c6","id":"tcs_01M5KFXMHARDXE66756AQY5E1J","modified_at":"2026-07-08T05:59:44.191273868Z","published_at":"2020-05-12T00:39:03Z","references":["https://osv.dev/vulnerability/GHSA-jc83-cpf9-q7c6","https://github.com/simpleledger/slpjs/security/advisories/GHSA-jc83-cpf9-q7c6","https://nvd.nist.gov/vuln/detail/CVE-2020-11071","https://github.com/simpleledger/slpjs/commit/3671be2ffb6d4cfa94c00c6dc8649d1ba1d75754"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-jc83-cpf9-q7c6","url":"https://osv.dev/vulnerability/GHSA-jc83-cpf9-q7c6"}],"summary":"False-negative validation results in MINT transactions with invalid baton"}