VYPR
← All advisories
High severity8.6NVD Advisory· Published May 12, 2020· Updated Jun 17, 2026

CVE-2020-11071

CVE-2020-11071

Description

SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This is fixed in version 0.27.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
slpjsnpm
< 0.27.20.27.2

Affected products

3
  • Simpledns/slpjs2 versions
    cpe:2.3:a:simpleledger:slpjs:*:*:*:*:*:node.js:*:*+ 1 more
    • cpe:2.3:a:simpleledger:slpjs:*:*:*:*:*:node.js:*:*range: <0.27.2
    • (no CPE)range: < 0.27.2
  • ghsa-coords
    pkg:npm/slpjs
    Range: < 0.27.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.