Unknown vulnerability in Coinbase Wallet SDK

Description

There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users’ keys, smart contracts, or funds.

Recommendation

Update the @coinbase/wallet-sdk package to the latest compatible version. Followings are version details:

• Affected version(s): >= 4.0.0-beta.0, < 4.3.0
• Patched version(s): 4.3.0

References

• GHSA-8rgj-285w-qcq4

Related Issues

• matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
• Sentry SDK Prototype Pollution gadget in JavaScript SDKs - Vulnerability
• Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin - Vulnerability
• x402 SDK vulnerable in outdated versions in resource servers for builders (GHSA-3j63-5h8p-gf7c) 2 - Vulnerability

Tags:

npm

@coinbase/wallet-sdk