bsv-sdk vulnerabilities (RubyGems)

2 vulnerabilities.

• bsv-sdk RubyGems bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) CVE-2026-40070 Fix available 8.1 HighApril 9, 2026
• bsv-sdk RubyGems bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts CVE-2026-40069 Fix available 7.5 HighApril 9, 2026