Unknown vulnerability in Coinbase Wallet SDK

Description

There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.

Recommendation

Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:

• Affected version(s): >= 4.0.0-beta.0, < 4.3.0
• Patched version(s): 4.3.0

References

• GHSA-8rgj-285w-qcq4

Related Issues

• matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
• x402 SDK vulnerable in outdated versions in resource servers for builders - x402-express - Vulnerability
• x402 SDK vulnerable in outdated versions in resource servers for builders - x402-next - Vulnerability
• x402 SDK vulnerable in outdated versions in resource servers for builders - x402 - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@coinbase/wallet-sdk