CVE-2019-16762

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.

• CWE-20
• CWE-20

• https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701Patch, Third Party Advisory
• https://github.com/simpleledger/slpjs/security/advisories/GHSA-425c-ccf3-3jrrExploit, Patch, Third Party Advisory
• https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701Patch, Third Party Advisory
• https://github.com/simpleledger/slpjs/security/advisories/GHSA-425c-ccf3-3jrrExploit, Patch, Third Party Advisory

Published

Nov 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16755BMC Remedy ITSM Suite is prone to unspecified vulnerabilitie…9.8
• CVE-2019-16758In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port…7.5
• CVE-2019-16759vBulletin 5.x through 5.5.4 allows remote command execution …9.8
• CVE-2019-1676A vulnerability in the Session Initiation Protocol (SIP) cal…6.8
• CVE-2019-16760Cargo prior to Rust 1.26.0 may download the wrong dependency…7.5
• CVE-2019-16761A specially crafted Bitcoin script can cause a discrepancy b…6.1
• CVE-2019-16763In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitize…6.1
• CVE-2019-16764The use of `String.to_atom/1` in PowAssent is susceptible to…5.5
• CVE-2019-16765If an attacker can get a user to open a specially prepared d…7.8
• CVE-2019-16766When using wagtail-2fa before 1.3.0, if someone gains access…8.8
• CVE-2019-16767The admin sys mode is now conditional and dedicated for the …7.2
• CVE-2019-16768In affected versions of Sylius, exception messages from inte…4.3