Homograph attack allows Unicode lookalike characters to bypass validation.

GHSA ID

GHSA-xq7p-g2vc-g82p

CVE ID

CVE-2025-27611

Severity

high

Published

2025-04-30T16:34:59Z

Updated

2025-05-01T13:31:00Z

CVSS v4

8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Description

CWEs

• CWE-1007 · Insufficient Visual Distinction of Homoglyphs Presented to User

References

• https://github.com/cryptocoinjs/base-x/security/advisories/GHSA-xq7p-g2vc-g82p ↗
• https://github.com/cryptocoinjs/base-x/pull/86 ↗
• https://nvd.nist.gov/vuln/detail/CVE-2025-27611 ↗
• https://github.com/advisories/GHSA-xq7p-g2vc-g82p ↗