Unknown vulnerability in Coinbase Wallet SDK

Description

There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.

Recommendation

Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:

• Affected version(s): >= 4.0.0-beta.0, < 4.3.0
• Patched version(s): 4.3.0

References

• GHSA-8rgj-285w-qcq4

Related Issues

• Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections - Vulnerability
• Sentry SDK Prototype Pollution gadget in JavaScript SDKs - Vulnerability
• MetaMask SDK indirectly exposed via malicious [email protected] dependency - @metamask/sdk-react - Vulnerability
• MetaMask SDK indirectly exposed via malicious [email protected] dependency - @metamask/sdk - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@coinbase/wallet-sdk