Unknown vulnerability in Coinbase Wallet SDK

Description

There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.

Recommendation

Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:

• Affected version(s): >= 4.0, < 4.3.0
• Patched version(s): 4.3.0

References

• GHSA-8rgj-285w-qcq4

Related Issues

• mpregular vulnerable to prototype pollution - CVE-2025-57323
• DOMPurify allows Cross-site Scripting (XSS) - CVE-2025-26791
• lite-server vulnerable to Denial of Service - CVE-2022-25940
• Manifest Uses a One-Way Hash without a Salt - CVE-2025-27408

Tags:

npm

@coinbase/wallet-sdk