BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability

Description

No description available.

Recommendation

Update the @bsv/sdk package to the latest compatible version. Followings are version details:

• Affected version(s): < 2.0.0
• Patched version(s): 2.0.0

References

• GHSA-vjpq-xx5g-qvmm
• CVE-2025-69287
• CWE-573
• CAPEC-310
• OWASP 2021-A6

Related Issues

• @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking - CVE-2025-25285
• CSVTOJSON has a prototype pollution vulnerability - CVE-2025-57350
• jsPDF has Local File Inclusion/Path Traversal vulnerability - CVE-2025-68428
• @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtrac - CVE-2025-25290

You might also like:

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

Tags:

npm

@bsv/sdk