~ / search / GHSA-xq7p-g2vc-g82p

GHSA-xq7p-g2vc-g82p

Homograph attack allows Unicode lookalike characters to bypass validation.

Source: GitHub Advisory Database (reviewed) High CVE-2025-27611

Packages

EcosystemPackageAffectedFixed in
npm base-x >= 5.0.0, < 5.0.1 5.0.1
npm base-x >= 4.0.0, < 4.0.1 4.0.1
npm base-x < 3.0.11 3.0.11

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Attackers can deceive users into sending funds to an unintended address. ### Patches https://github.com/cryptocoinjs/base-x/pull/86

References

External links from the advisory. They lead to third-party sites.