HIGH

GHSA-8rgj-285w-qcq4

Unknown vulnerability in Coinbase Wallet SDK

Quick fix

GHSA-8rgj-285w-qcq4 — @coinbase/wallet-sdk: upgrade to the fixed version with the command below.

npm install @coinbase/wallet-sdk@4.3.0

Details

### Impact There is a security vulnerability in outdated versions of Coinbase Wallet SDK. This does not directly affect users' keys, smart contracts, or funds.

### Patches Please update to version >= 4.3.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@coinbase/wallet-sdk

Introduced in: 4.0.0-beta.0Fixed in: 4.3.0

Fixnpm install @coinbase/wallet-sdk@4.3.0

References

https://github.com/coinbase/coinbase-wallet-sdk/security/advisories/GHSA-8rgj-285w-qcq4[WEB]
https://github.com/coinbase/coinbase-wallet-sdk[PACKAGE]