CVE-2020-11072

In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This has been fixed in slp-validate in version 1.2.1. Additonally, slpjs version 0.27.2 has a related fix under related CVE-2020-11071.

• CWE-697
• CWE-697

• https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7Patch, Third Party Advisory
• https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44Third Party Advisory
• https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7Patch, Third Party Advisory
• https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44Third Party Advisory

Published

May 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11067In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1,…8.8
• CVE-2020-11068In LoRaMac-node before 4.4.4, a reception buffer overflow ca…8.8
• CVE-2020-11069In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1,…8.8
• CVE-2020-1107A spoofing vulnerability exists when Microsoft SharePoint Se…5.4
• CVE-2020-11070The SVG Sanitizer extension for TYPO3 has a cross-site scrip…5.4
• CVE-2020-11071SLPJS (npm package slpjs) before version 0.27.2, has a vulne…8.6
• CVE-2020-11073In Autoswitch Python Virtualenv before version 0.16.0, a use…7.8
• CVE-2020-11074In PrestaShop from version 1.5.3.0 and before version 1.7.6.…5.4
• CVE-2020-11075In Anchore Engine version 0.7.0, a specially crafted contain…9.9
• CVE-2020-11076In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could…7.5
• CVE-2020-11077In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could sm…7.5
• CVE-2020-11078In httplib2 before version 0.18.0, an attacker controlling u…6.8