Search results

Mutable Docker Tag Enables CI Code Execution

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3325 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Batch Signature Not Bound To Account

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3324 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Allows ws connections

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3323 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Private key material leaked in error messages

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3322 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

getServerInfo() swallows errors, enabling cross-network replay attacks

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3321 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Off-by-one in compare() -- last byte never compared

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3320 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Amount.toJSON() mutates internal this.bytes buffer

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3319 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Server-controlled event injection via unvalidated data.type

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3318 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Private key material leaked in error messages

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3317 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

dropsToXrp() returns number, causing precision loss for large amounts

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3316 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

getServerInfo() swallows errors, enabling cross-network replay

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3315 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026

Unencrypted ws:// connections allowed with credentials

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#3314 In XRPLF/xrpl.js;

· ckeshava opened on Apr 17, 2026