@axyzsdk/js (0.0.0), @axyzsdk/react (0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0, <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0-alpha.1, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@audius/sdk (>=0.0.3-beta.1, <=3.0.8-beta.12), @audius/stems (>=1.5.2-beta.1, <=1.5.4) +14 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.37.0, <=1.37.2)

@solana/web3.js NPM version =1.37.0, =0.0.3-beta.1, =1.5.2-beta.1, =0.0.3, =0.0.1, =0.2.0, =1.5.1, =0.3.3, =3.2.8, =3.3.0 - @winter-love/wallet 1.0.25-alpha.14 - kyzr-marketplace-sdk 0.0.1 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@aloe2/account-lib (2.20.20228282226), @aloe2/bitgo (14.2.20228282226) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.56.0, <=1.56.2)

@solana/web3.js NPM version =1.56.0, =2.20.0, =14.2.0, =1.0.1, =2.0.0-rc.18, =8.0.1, =3.0.0-alpha.12, =3.1.2-beta.0, =2.2.33, =2.0.1-alpha.412, =7.0.0, =8.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@brave/wallet-standard-brave (>=0.0.8, <=0.0.12), @oraichain/owallet-wallet-standard (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.58.0)

@solana/web3.js NPM version 1.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @brave/wallet-standard-brave =0.0.8, =0.1.0, =0.1.6, =0.1.10 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...

@civic/civic-link (>=0.0.5, <=0.0.8-beta.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.65.0)

@solana/web3.js NPM version 1.65.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/civic-link =0.0.5, =0.0.8-beta.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@debridge-finance/solana-grpc (>=1.1.2, <=1.1.3), @mochi-web3/connect-wallet-widget (>=0.0.7, <=0.2.10) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.74.0)

@solana/web3.js NPM version 1.74.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-grpc =1.1.2, =0.0.7, =0.2.2, =1.194.0, =1.261.0 Source cves: CVE-2024-30253 Source advisory:...

@audius/fetch-nft (>=0.1.8-beta.1, <=0.2.6), @audius/sdk (>=3.0.8-beta.13, <=4.2.0) +52 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.78.0, <=1.78.7)

@solana/web3.js NPM version =1.78.0, =0.1.8-beta.1, =3.0.8-beta.13, =0.0.10, =2.20.1-beta.306, =14.2.1-beta.306, =2.2.3-alpha.61, =1.0.1-rc.0, =2.21.0-hotfix.0, =2.6.0, =0.0.5-beta.0, =1.1.0-alpha.1, =1.1.11 - @ctrl-tech/chains-controller 2.0.5 - @ctrl-tech/chains-solana 2.0.18 and more Source...

@3s-wallet-core/provider (>=0.0.2, <=1.0.3), @3s-wallet-core/wallet (>=0.0.4, <=1.0.2) +23 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.89.0, <=1.89.1)

@solana/web3.js NPM version =1.89.0, =0.0.2, =0.0.4, =0.4.0-beta.25, =0.4.0-beta.30, =0.4.0-beta.30, =0.4.0-beta.30, =0.0.1, =0.0.2-beta.15, =2.34.0-rc.1, =0.0.1, =0.0.1, =0.0.1-beta, =0.4.0-beta.2, =0.4.0-beta.0, =0.1.8-beta.8, =0.4.6 and more Source cves: CVE-2024-30253 Source advisory:...

@civic/civic-sign (>=0.0.4, <=0.0.14), @civic/serum (>=0.17.3, <=0.17.4) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.39.0, <=1.39.1)

@solana/web3.js NPM version =1.39.0, =0.0.4, =0.17.3, =0.3.1-3.beta.1, =0.0.1, =0.2.1, =3.4.1, =2.0.0-beta.1, =0.4.3, =3.11.8, =3.11.14 - winto-sdk 1.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@3s-wallet-core/provider (>=0.0.2, <=0.0.3), @3s-wallet-core/wallet (0.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.87.2, <=1.87.6)

@solana/web3.js NPM version =1.87.2, =0.0.2, =0.0.6, =0.1.9, =2.0.3, =0.0.1-alpha.1, =0.0.2, =2.0.0-alpha.15, =0.1.3-rc.1, =3.0.4-1, =0.2.2, =1.11.3-nobnb, =1.0.0, =1.1.0 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@altruism-finance/js (>=0.1.0, <=0.1.1), @sh-coins/solana (>=0.3.0, <=0.3.8) potentially affected by CVE-2024-30253 via @solana/web3.js (1.52.0)

@solana/web3.js NPM version 1.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @altruism-finance/js =0.1.0, =0.3.0, =0.3.8 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@dynamic-labs/blocto-evm (>=0.19.0-alpha.21, <=2.1.0-alpha.0), @dynamic-labs/ethereum (>=0.17.0-RC.9, <=2.1.0-alpha.0) +18 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.70.1, <=1.70.3)

@solana/web3.js NPM version =1.70.1, =0.19.0-alpha.21, =0.17.0-RC.9, =2.0.0-alpha.31, =0.18.100-viem.1, =0.15.1-minimal.0, =2.0.0-alpha.4, =0.17.0-RC.7, =0.17.0-RC.7, =0.17.0-RC.10, =0.19.3, =0.19.0-alpha.13, =2.1.0, =0.1.18, =0.0.23, =0.0.21, =0.0.32 and more Source cves: CVE-2024-30253 Source...

CVE-2024-30253

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

CVE-2024-30253

The CVE concerns @solana/web3.js (Solana JavaScript SDK). Certain inputs can trigger memory exhaustion (OOM), causing an application or service to crash and potentially lose availability. Affected releases are numerous; remediation is to upgrade to the fixed versions listed in the advisory (examp...

CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

web3.js 安全漏洞

Web3.js is a TypeScript implementation of the Ethernet JSON RPC API open-sourced by Web3 and related tools maintained by ChainSafe Systems. A security vulnerability exists in solana/web3.js that stems from allowing an attacker to cause an out-of-memory OOM using specific input...

PT-2024-23300 · Solana · @Solana/Web3.Js

Name of the Vulnerable Software and Affected Versions: @solana/web3.js versions prior to 1.0.1 @solana/web3.js versions prior to 1.10.2 @solana/web3.js versions prior to 1.11.1 @solana/web3.js versions prior to 1.12.1 @solana/web3.js versions prior to 1.1.2 @solana/web3.js versions prior to 1.13....