bitcoinj vulnerabilities

CVEs whose affected-version data names the bitcoinj package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111210High· 7.3

today

bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery

A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pki_type can lead to se…

▾ Twilightvia CVEORG