@bsv/wallet-toolbox vulnerabilities (npm)

1 vulnerability.

• @bsv/wallet-toolbox npm `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redirect payments when using remote storage) CVE-2026-56744 Fix available 8.7 HighSeptember 24, 2026