Homepage

Missing Encryption of Sensitive Data Affecting @coinbase/wallet-sdk package, versions >=4.0.0 <4.3.0

Severity

 Recommended
0.0
critical
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Not Defined

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Missing Encryption of Sensitive Data vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-JS-COINBASEWALLETSDK-8717118
  • published12 Feb 2025
  • disclosed10 Feb 2025
  • creditUnknown
Report a new vulnerability Found a mistake?

Introduced: 10 Feb 2025

New CVE NOT AVAILABLE CWE-311  (opens in a new tab)

How to fix?

Upgrade @coinbase/wallet-sdk to version 4.3.0 or higher.

Overview

@coinbase/wallet-sdk is a Coinbase Wallet JavaScript SDK

Affected versions of this package are vulnerable to Missing Encryption of Sensitive Data due to request signing in an untrusted context.

CVSS Scores

version 4.0
version 3.1