HIGHnpm
GHSA-36f9-7rg5-cpf8· CVE-2026-56744`@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction
Modified: 9/24/2026
package
npm/@bsv/wallet-toolbox
pkg:npm/%40bsv/wallet-toolbox