CyberSecBulletin

Bitcoinj vulnerabilities

We track 2 vulnerabilities in Bitcoinj products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Bitcoinj vulnerabilities

  • 7.3 High severity

    bitcoinj: Server-Side Request Forgery

    CVE-2026-111210Bitcoinj

    A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pki_type can lead to server-side request forge

  • 7.5 High severity

    bitcoinj: Improper Verification of Cryptographic Signature

    CVE-2026-44714Bitcoinj

    The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH spends in core/src/main/java/org/bitcoinj/script/ScriptExecu