VYPR
Medium severity5.7NVD Advisory· Published Nov 15, 2019· Updated Jun 17, 2026

CVE-2019-16762

CVE-2019-16762

Description

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
slpjsnpm
< 0.21.40.21.4

Affected products

3
  • Simpledns/slpjs2 versions
    cpe:2.3:a:simpleledger:slpjs:*:*:*:*:*:node.js:*:*+ 1 more
    • cpe:2.3:a:simpleledger:slpjs:*:*:*:*:*:node.js:*:*range: <0.21.4
    • (no CPE)range: < 0.21.4
  • ghsa-coords
    Range: < 0.21.4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.