According to CoinMeta, Ledger has disclosed details of a security vulnerability (LSB 023). Some applications built on the basis of Ledger Secure SDK can still receive APDU commands during the screen confirmation process, resulting in inconsistencies between the parameters displayed on the screen and the final signed parameters. Ledger has released Ledger Secure SDK and v26.6.1 to rebuild the relevant applications. Users need to update their applications through Ledger Live. Currently, there is no evidence that this vulnerability has been actually exploited.