Bitcoinjs-lib, a library for building Bitcoin applications, has patched two vulnerabilities that could cause related software to underestimate valid transaction fees and miss warnings for excessively high fees. These vulnerabilities were disclosed on October 26 and have been fixed in versions 5.2.2, 6.1.9, and 7.0.4.