XSS in Trezor Connect

Nahlášeno August 3, 2020

In August 2020, we were contacted by Gamer7112, a security researcher, who reported XSS issues in Trezor Connect. The issues were fixed and deployed to production shortly after.

Trezor Connect

Vyřešené zranitelnosti

Nahlášeno komunitou. Prošetřeno. Vyřešeno. Protože vaše bezpečnost není nikdy volitelná.

Inability to cancel certain flows on pre-production firmware
31. října 2025
Donjon's Trezor Safe 3 evaluation
12. listopadu 2024
Missing confirmation in the ECDHSessionKey call
26. listopadu 2023
XSS in Trezor Connect legacy versions
7. února 2023
Insufficient field size check in Protobuf
12. července 2021
Missing path isolation check
14. července 2020