{"id":"CVE-2019-16761","details":"A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions \u003e1.0.0 have been patched.","aliases":["GHSA-wmx6-vxcf-c3gr"],"modified":"2026-07-09T02:49:17.181943Z","published":"2019-11-15T23:15:11.317Z","references":[{"type":"FIX","url":"https://github.com/simpleledger/slp-validate/commit/50ad96c2798dad6b9f9a13333dd05232defe5730#diff-fe58606994c412ba56a65141a7aa4a62L123"},{"type":"FIX","url":"https://github.com/simpleledger/slp-validate/security/advisories/GHSA-wmx6-vxcf-c3gr"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/simpleledger/slp-validate.js","events":[{"introduced":"cd9251971a0b4461f40dc0d8642e27e1bd2a062c"},{"last_affected":"cd9251971a0b4461f40dc0d8642e27e1bd2a062c"},{"fixed":"50ad96c2798dad6b9f9a13333dd05232defe5730"}],"database_specific":{"cpe":"cpe:2.3:a:simpleledger:slp-validate:1.0.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-16761.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H"}]}