<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: simpleledger</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-15131: In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive va</title><link>https://patchthecve.com/cve/CVE-2020-15131.html</link><guid>https://patchthecve.com/cve/CVE-2020-15131.html</guid><pubDate>Wed, 17 Jun 2026 02:56:06 +0000</pubDate><description>HIGH 7.5: In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any o</description></item><item><title>CVE-2020-15130: In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outc</title><link>https://patchthecve.com/cve/CVE-2020-15130.html</link><guid>https://patchthecve.com/cve/CVE-2020-15130.html</guid><pubDate>Wed, 17 Jun 2026 02:56:06 +0000</pubDate><description>HIGH 7.5: In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Gr</description></item><item><title>CVE-2020-11072: In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validat</title><link>https://patchthecve.com/cve/CVE-2020-11072.html</link><guid>https://patchthecve.com/cve/CVE-2020-11072.html</guid><pubDate>Wed, 17 Jun 2026 02:48:59 +0000</pubDate><description>HIGH 8.6: In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user&#x27;s minting baton. Thi</description></item><item><title>CVE-2020-11071: SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negati</title><link>https://patchthecve.com/cve/CVE-2020-11071.html</link><guid>https://patchthecve.com/cve/CVE-2020-11071.html</guid><pubDate>Wed, 17 Jun 2026 02:48:59 +0000</pubDate><description>HIGH 8.6: SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user&#x27;s minting </description></item><item><title>CVE-2020-11014: Electron-Cash-SLP before version 3.6.2 has a vulnerability</title><link>https://patchthecve.com/cve/CVE-2020-11014.html</link><guid>https://patchthecve.com/cve/CVE-2020-11014.html</guid><pubDate>Wed, 17 Jun 2026 02:48:51 +0000</pubDate><description>MEDIUM 6.1: Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the &quot;Mint Tool&quot; feature of the Electron Cash SLP Edition are at risk of sending the minting authority baton to the wrong SLP address. Sending the mint baton to the wrong address will give another party the abilit</description></item></channel></rss>