Skip to main content
cve.nowby Sazabi
Menu
crates.io

Package

bsv-rs

6 known CVEs, with the versions each affects and the releases that fix them.

crates.io

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6
Registry
crates.io

Advisories 6

  • KVStoreInterpreter::verify_signature_legacy answers true for every token and every key

    Affected: fixed in 0.8.9; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.

  • Shamir backup recovery accepts a share at x = 0, so a supplied share can substitute the recovered private key

    Affected: fixed in 0.8.7; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.

  • Signature::from_der reads a signature with bytes after it, a wrong sequence length or an unneeded zero as the signature

    Affected: fixed in 0.8.6; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.

  • Transaction::from_json holds an input txid that is not 64 hex digits and writes the input as spending the zero txid

    Affected: fixed in 0.8.6; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.

  • BEEF validation answers valid for a raw entry that is not a transaction

    Affected: fixed in 0.8.5; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.

  • Transaction readers accept trailing bytes, so a parsed transaction can carry another transaction id

    Affected: fixed in 0.8.5; from 0.9.0-beta.1, fixed in 0.9.0-beta.7.0.