Bitcoinjs-lib library bugs could understate miner fees and bypass safety checks

Two vulnerabilities in the bitcoinjs-lib library could cause Bitcoin applications to understate miner fees. The first flaw allows signing and fee accounting to use conflicting input values, making calculated fees appear much lower than actual amounts. The second flaw counts missing input values as zero in finalized transactions. Patched versions 5.2.2, 6.1.9 and 7.0.4 are available; applications relying on the library's fee calculation without independent verification are at risk.