Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. @account-kit/smart-contracts
  4. ›
  5. GHSA-56r6-ccm5-8hg3

GHSA-56r6-ccm5-8hg3: Alchemy Non-SMA and Webauthn Account Security Advisory

July 21, 2025

A potential security issue has been mitigated on old account deployment functions from the factory. Smart wallets in use on all existing supported networks are not impacted.

References

  • github.com/advisories/GHSA-56r6-ccm5-8hg3
  • github.com/alchemyplatform/aa-sdk/commit/b343437a9e4a833c25fed7bc8785a815cbbae0ee
  • github.com/alchemyplatform/modular-account
  • github.com/alchemyplatform/modular-account/commit/2352c9b692935ba97d98619cb31ba1653eee241f
  • github.com/alchemyplatform/modular-account/security/advisories/GHSA-56r6-ccm5-8hg3

Code Behaviors & Features

Detect and mitigate GHSA-56r6-ccm5-8hg3 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 4.42.0 before 4.52.0

Fixed versions

  • 4.52.0

Solution

Upgrade to version 4.52.0 or above.

Weakness

  • CWE-287: Improper Authentication

Source file

npm/@account-kit/smart-contracts/GHSA-56r6-ccm5-8hg3.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Tue, 19 Aug 2025 12:18:53 +0000.