37 matches found
@beeman/my-anchor-app-anchor (0.0.1), @epplex-xyz/sdk (>=0.1.42, <=0.3.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.90.0)
@solana/web3.js NPM version 1.90.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @beeman/my-anchor-app-anchor 0.0.1 - @epplex-xyz/sdk =0.1.42, =0.0.1, =0.1.2 Source cves: CVE-2024-30253 Source advisory:...
@jup-ag/dca-v2-sdk (>=0.0.0-beta-1, <=0.0.0-beta-9), @jup-ag/smart-wallet (>=0.0.0-beta-1, <=0.0.0-beta-9) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.75.0)
@solana/web3.js NPM version 1.75.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @jup-ag/dca-v2-sdk =0.0.0-beta-1, =0.0.0-beta-1, =0.0.31, =1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...
@arb-protocol/core (>=2.0.0-alpha.1, <=2.0.0-alpha.6), @arb-protocol/jupiter-adapter (>=2.0.0-alpha.5, <=2.0.0-alpha.6) +18 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.69.0)
@solana/web3.js NPM version 1.69.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @arb-protocol/core =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =0.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.8, =1.0.63, =1.0.0...
@jup-ag/core (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78), @jup-ag/react-hook (>=3.0.0-beta.0, <=3.0.0-beta.8-eacba78) +7 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.63.0, <=1.63.1)
@solana/web3.js NPM version =1.63.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.1-38592825.0, =0.0.1-0f199db9.0, =4.0.0-maple-1, =0.1.0, =1.4.8, =1.0.0, =1.7.1-alpha.4 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@chainify/solana (>=1.2.14, <=2.4.1), @liquality/error-parser (>=1.1.0-next.1, <=1.1.4-next.2) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.50.1)
@solana/web3.js NPM version 1.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @chainify/solana =1.2.14, =1.1.0-next.1, =1.28.2, =0.0.1-rc12, =3.0.0-alpha.16, =3.4.4, =2.0.0, =2.0.0, =0.3.12, =0.3.3, =0.3.3,...
@brbb/bot-farm-ts (>=0.0.1, <=0.0.3), @phantasia/blockchain-interface (>=3.6.10, <=5.0.0) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.47.2, <=1.47.3)
@solana/web3.js NPM version =1.47.2, =0.0.1, =3.6.10, =1.13.2, =1.0.0, =0.3.53, =0.3.54 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@fabric-foundation/sdk (>=0.0.65, <=1.0.2-beta.6), @frakt-protocol/frakt-sdk (>=0.0.7, <=0.0.9) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.34.0)
@solana/web3.js NPM version 1.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.65, =0.0.7, =3.0.4, =3.0.6 - @toruslabs/solana-embed 0.1.4 Source cves: CVE-2024-30253 Source advisory...
@bonfida/sns-reputation (>=0.0.1, <=0.0.7), @levelfinance/keeper (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.30.2)
@solana/web3.js NPM version 1.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @bonfida/sns-reputation =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@parrotfi/wallets (1.0.0) potentially affected by CVE-2024-30253 via @solana/web3.js (1.2.5)
@solana/web3.js NPM version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @parrotfi/wallets 1.0.0 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@civic/multichain-connect-react-solana-wallet-adapter (>=0.0.0-alpha.1, <=0.0.3-beta.11), @debridge-finance/dln-client (>=5.1.0, <=8.2.2) +6 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.76.0)
@solana/web3.js NPM version 1.76.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/multichain-connect-react-solana-wallet-adapter =0.0.0-alpha.1, =5.1.0, =2.11.0-alpha.0, =1.0.0, =0.1.1-alpha.8,...
2.typescript-init (1.0.0), @bloxroute/solana-trader-client-ts (>=1.5.1, <=2.2.12) +72 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.73.0, <=1.73.3)
@solana/web3.js NPM version =1.73.0, =1.5.1, =0.2.11, =5.1.0, =2.11.0-alpha.0, =1.0.0, =1.1.0, =2.0.0, =1.12.51, =2.60.0-beta.6.0.0.1, =0.2.0, =0.1.0, =0.10.385 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@aurora-is-near/intents-swap-widget (>=3.17.2, <=7.19.0), @aurora-is-near/intents-swap-widget-standalone (>=6.0.0, <=7.19.0) +16 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.68.0)
@solana/web3.js NPM version 1.68.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @aurora-is-near/intents-swap-widget =3.17.2, =6.0.0, =0.17.1, =1.0.33, =2.18.0, =0.2.3, =0.9.0, =0.9.0, =0.21.4-beta, =0.72.0,...
@nikaru-dev/provider-all (>=0.25.1-next.3, <=0.26.0), @nikaru-dev/provider-walletconnect-2 (>=0.18.1-next.2, <=0.19.1-next.0) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.67.0, <=1.67.2)
@solana/web3.js NPM version =1.67.0, =0.25.1-next.3, =0.18.1-next.2, =0.20.1-next.9, =0.20.1-next.16, =0.22.1-next.0, =0.14.1-next.5, =0.17.1-next.0, =0.17.1-next.0, =0.22.1-next.9, =0.14.1-next.8, =0.17.1-next.19, =0.17.1-next.30, =0.0.1, =0.1.5 Source cves: CVE-2024-30253 Source advisory:...
@0xunreal/dynamic-amm-sdk (>=0.4.22, <=0.4.23), @0xunreal/vault-sdk (0.5.3) +58 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.66.0, <=1.66.2)
@solana/web3.js NPM version =1.66.0, =0.4.22, =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =2.11.0-alpha.0, =0.1.0, =0.2.0-master.41, =1.9.0, =0.0.2, =1.10.0-alpha.6, =4.0.0-beta.5, =4.0.0-beta.5, =4.0.0-beta.14 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@audius/sdk (0.0.36), @cardinal/squads-utils (>=0.0.2, <=0.0.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.53.0)
@solana/web3.js NPM version 1.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @audius/sdk 0.0.36 - @cardinal/squads-utils =0.0.2, =0.0.6 - @snowflake-so/wallet-adapter-snowflake 1.0.12 Source cves:...
@hubbleprotocol/hubble-sdk (>=1.0.48, <=2.0.24), @streamflow/stream (>=3.0.14-dev, <=3.0.19) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.42.0)
@solana/web3.js NPM version 1.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @hubbleprotocol/hubble-sdk =1.0.48, =3.0.14-dev, =2.0.0-rc.1, =2.0.2 Source cves: CVE-2024-30253 Source advisory:...
@axyzsdk/js (>=0.1.0-canary.0, <=0.2.1), @axyzsdk/react (>=0.1.0-canary.0, <=0.2.1) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.36.0)
@solana/web3.js NPM version 1.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @axyzsdk/js =0.1.0-canary.0, =0.1.0-canary.0, =0.0.7, =0.0.2, =0.0.3, =2.0.8, =0.1.46, =1.1.135, =0.1.0-alpha-11, =0.3.0, =0.0.4,...
@cardinal/namespaces-components (>=4.1.0, <=5.0.0), @frakters/fusion-pool (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.32.0)
@solana/web3.js NPM version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @cardinal/namespaces-components =4.1.0, =1.0.0, =0.0.29, =0.0.32 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...
@strata-foundation/governance-cli (>=3.11.0, <=3.11.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.22.0)
@solana/web3.js NPM version 1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @strata-foundation/governance-cli =3.11.0, =3.11.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...
@blockworks-foundation/mango-client (>=3.0.14, <=3.2.23), @frakters/community-pools-client-library-v2 (>=1.0.7, <=1.0.9) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.21.0)
@solana/web3.js NPM version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @blockworks-foundation/mango-client =3.0.14, =1.0.7, =1.0.1, =2.2.3, =0.0.6, =1.0.0, =0.0.1, =1.0.0, =1.2.5, =1.0.0, =1.0.0, =0.2....