Unknown vulnerability in Coinbase Wallet SDK

Description

There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.

Recommendation

Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:

• Affected version(s): >= 4.0.0-beta.0, < 4.3.0
• Patched version(s): 4.3.0

References

• GHSA-8rgj-285w-qcq4

Related Issues

• MetaMask SDK indirectly exposed via malicious [email protected] dependency - Vulnerability
• matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
• AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value - Vulnerability
• x402 SDK Security Advisory - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@coinbase/wallet-sdk