Issues · stellar/js-stellar-sdk · GitHub

Labels Milestones New issue

Epic: js-stellar-sdk modernization

#1388

· Ryang-21 opened

on Apr 16, 2026

Modernization 4/4: Move migrated TypeScript js-stellar-base into the repo

#1387

· Ryang-21 opened

on Apr 16, 2026

Modernization 3/4: Move build tooling to Rollup

#1386

· Ryang-21 opened

on Apr 16, 2026

Modernization 2/4: Remove CJS constructs and make the library ESM compliant

#1385

· Ryang-21 opened

on Apr 16, 2026

Modernization 1/4: Replace axios and feaxios with a native fetch client

#1384

· Ryang-21 opened

on Apr 16, 2026

SDK Updates for Protocol 26 Compatibility

#1377

· Shaptic opened

on Apr 6, 2026

[AI Security] High: AssembledTransaction.fromJSON restores stale simulation cache without verifying it matches the deserialized transaction XDR

#1369

· sagpatil opened

on Mar 31, 2026

[AI Security] High: Client.from()/fromWasmHash() trusts RPC-fetched ABI, enabling argument reordering by malicious RPC

#1368

· sagpatil opened

on Mar 31, 2026

[AI Security] Medium: Sourceless `client_domain` ManageData op silently disables client domain signer verification in verifyChallengeTxSigners()

#1367

· sagpatil opened

on Mar 31, 2026

[AI Security] High: Client.deploy() trusts RPC returnValue for deployed contract address without verification

#1366

· sagpatil opened

on Mar 31, 2026

[AI Security] Medium: signAuthEntries() trusts RPC ledger state for default auth expiry

#1363

· sagpatil opened

on Mar 30, 2026

[AI Security] Medium: Domain @ authority confusion redirects stellar.toml and federation lookups to attacker infrastructure

#1359

· sagpatil opened

on Mar 30, 2026