CyberSecBulletin

Openwallet-foundation vulnerabilities

We track 1 vulnerability in Openwallet-foundation products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Openwallet-foundation vulnerabilities

  • 7.1 High severity

    @sd-jwt/core: Improper Handling of Unicode Encoding

    CVE-2026-62374Openwallet-foundation

    SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and earlier, `@sd-jwt/decode`, also used by `@sd-jwt/core`, silently drops a tampered Disclosure whose digest no longer matches the Issuer-signed