HIGH
sgbett
CVE published 2026-04-09
CVE-2026-40069
The BSV Ruby SDK incorrectly handles certain transaction broadcast outcomes, potentially tricking applications into trusting unaccepted transactions. This issue arises from the SDK's failure detection mechanism, which only recognizes REJECTED and DOUBLE_SPEND_ATTEMPTED statuses, while silently treating other statuses like INVALID, MALFORMED, MINED_IN_STALE_BLOCK, or those containing ORPHAN as successful b [truncated]