Kembali ke portal keamanan
XSS in Trezor Connect
Dilaporkan pada August 3, 2020
In August 2020, we were contacted by Gamer7112, a security researcher, who reported XSS issues in Trezor Connect. The issues were fixed and deployed to production shortly after.
Trezor Connect
Kerentanan yang teratasi
Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.
- Trezor T Bootloader firmware update retry could skip header checks29 September 2026
- E-shop referral discount could be applied to eGift card purchases16 September 2026
- Authenticity proofs not bounded to their secure element on TS716 Agustus 2026
- Monero payment ID could be signed without being shown13 Agustus 2026
- Missing bounds check in JPEG image decoding12 Agustus 2026
- Cardano output datum and reference script not shown in simple transactions11 Agustus 2026