Search results

Signing request reprs expose secret / seed / passphrase fields

Status: Open.

#992 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Mutable PyPI Publish Action

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#991 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Mutable Docker Tag Executes CI Code

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#990 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Mutable Release Actions

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#989 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Malformed Signatures Crash Verification

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#988 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Secret Seed Exposed in Wallet Initialization Error Messages

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#987 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Non-Cryptographic RNG Used for WebSocket Request IDs

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#986 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

HEX_REGEX Matches Empty Strings, Bypassing Validation

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#985 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Type Confusion in BinaryParser.peek() — Returns int, Typed as bytes

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#984 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

Assertions Used for Runtime Validation — Disabled with python -O

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#983 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

HEX_CURRENCY_REGEX Only Matches Uppercase Hex Characters

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#982 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026

No Issuer Address Validation in IssuedCurrency Model

AI TriageIssue reported via AI-assisted analysis; needs human triageIssue reported via AI-assisted analysis; needs human triage

Status: Open.

#980 In XRPLF/xrpl-py;

· ckeshava opened on Apr 17, 2026