slp-validate@1.2.1 vulnerabilities

JS SLP transaction validator

Direct Vulnerabilities

Known vulnerabilities in the slp-validate package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Incorrect Comparison

slp-validate is a Lightweight SLP validator with pre-broadcast validation and burn protection.

Affected versions of this package are vulnerable to Incorrect Comparison. There is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification.

How to fix Incorrect Comparison?

Upgrade slp-validate to version 1.2.2 or higher.

<1.2.2