XRPLF vulnerabilities
We track 1 vulnerability in XRPLF products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 22, 2025.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest XRPLF vulnerabilities
- 9.3 Critical severity
xrpl.js: Embedded Malicious Code
xrpl.js is a JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser. Versions 4.2.1, 4.2.2, 4.2.3, and 4.2.4 of xrpl.js were compromised and contained malicious code designed to exfiltrate private keys. Version 2.14.2 is also