https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:30:02.863362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-18239 cnvd-2021-18239 2026-10-04T06:30:02.930682+00:00 cnvd-2021-18239 https://cve.radiocsirt.org/vuln/euvd-2026-41087 EUVD-2026-41087 2026-10-04T06:30:02.930721+00:00 EUVD-2026-41087 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12119 fkie_cve-2020-12119 2026-10-04T06:30:02.930734+00:00

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.

 https://cve.radiocsirt.org/vuln/ghsa-gmgx-9fpg-9q58 GHSA-gmgx-9fpg-9q58 2026-10-04T06:30:02.930765+00:00

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.

 https://cve.radiocsirt.org/vuln/gsd-2020-12119 gsd-2020-12119 2026-10-04T06:30:02.930782+00:00 gsd-2020-12119