CVE-2020-11071

Published: May 12, 2020Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This is fixed in version 0.27.2.

Affected (1)

Products: Simpleledger: Slpjs

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Simpleledger Slpjs	Before 0.27.2

Related CWEs

Incorrect Comparison

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References (4)

https://github.com/simpleledger/slpjs/commit/3671be2ffb6d4cfa94c00c6dc8649d1ba1d75754

Source: security-advisories@github.com

PatchTool Signature

https://github.com/simpleledger/slpjs/security/advisories/GHSA-jc83-cpf9-q7c6

Source: security-advisories@github.com

Tool Signature

https://github.com/simpleledger/slpjs/commit/3671be2ffb6d4cfa94c00c6dc8649d1ba1d75754

Source: af854a3a-2127-422b-91ae-364da2661108

PatchTool Signature

https://github.com/simpleledger/slpjs/security/advisories/GHSA-jc83-cpf9-q7c6

Source: af854a3a-2127-422b-91ae-364da2661108

Tool Signature

Timeline

No history available yet.