An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithms in the component \vendor\faye-websocket.js.
| Software | From | Fixed in |
|---|---|---|
bsock
|
- | 0.1.11.x |
| bcoin / bcoin | 2.2.0 | 2.2.0.x |