nsmithuk / local-kms

A mock version of AWS' Key Management Service, for local development and testing.
MIT License
198 stars 34 forks source link

Update github.com/btcsuite/btcd to v0.23.4 to solve vuln #52

Closed mnPanicMeli closed 1 year ago

mnPanicMeli commented 1 year ago

Before version v0.23.2, the library has a critical vulnerability. It is fixed simply by updating the version.

We also need to change the btcec module to /v2 because it was changed on this commit: https://github.com/btcsuite/btcd/commit/87e8fe92c9328f971044389ed768ea3cc5c6b3d5

More information on the vulnerability here,

Solves #51

nsmithuk commented 1 year ago

Thank you @mnPanicMeli