trezor-connect vulnerabilities

High-level javascript interface for Trezor hardware wallet.

  • latest version

    8.2.12

  • latest non vulnerable version

  • first published

    7 years ago

  • latest version published

    2 years ago

  • deprecated

    Package is deprecated

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the trezor-connect package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Cross-site Scripting (XSS)

    <8.1.12

    Package versions

    217 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    8.2.126 Dec, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.12-extended6 Dec, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.1124 Aug, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.11-extended24 Aug, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.1018 Jul, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.10-extended18 Jul, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.914 Jun, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.9-extended14 Jun, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.9-beta.32 Jun, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    8.2.9-beta.217 May, 2022
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L