{"action":"Upgrade @bsv/sdk to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"@bsv/sdk","cve_ids":["CVE-2025-69287"],"ecosystem":"npm","epss":0.00341,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-vjpq-xx5g-qvmm","id":"tcs_01M5KGC6JP7T007T3MJEGFT0VY","modified_at":"2026-02-22T23:25:55.685555Z","published_at":"2026-02-17T16:13:48Z","references":["https://osv.dev/vulnerability/GHSA-vjpq-xx5g-qvmm","https://github.com/bsv-blockchain/ts-sdk/security/advisories/GHSA-vjpq-xx5g-qvmm","https://nvd.nist.gov/vuln/detail/CVE-2025-69287","https://github.com/bsv-blockchain/ts-sdk/commit/d8cf6930028372079d977138ae9eaa03ae2f50bb","https://github.com/bsv-blockchain/ts-sdk"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-vjpq-xx5g-qvmm","url":"https://osv.dev/vulnerability/GHSA-vjpq-xx5g-qvmm"}],"summary":"BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability"}