CVE ID :CVE-2026-107846 Published : Nov. 4, 2026, 7:17 p.m. | 1 hour, 48 minutes ago Description :bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3.0 until 5.2.1, 6.1.8, and 7.0.2, fastMerkleRoot pads odd Merkle-tree levels by hashing the final node with itself...

#Sicherheitslücke #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107846 - bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list

VERWANDTEARTIKEL

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

CVE-2026-122224 - WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

CVE-2026-122134 - Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

CVE-2026-122135 - Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

CVE-2026-122133 - Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

CVE-2026-122130 - CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin