CVE-2023-50053

An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce random number...

CVE-2023-50059

An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galxe, the signed message lacks a nonce random number...

Foundation 安全漏洞

Foundation is an application from Foundation, Inc. Foundation.app A security vulnerability exists in Foundation platform version 1.0, which originated from a vulnerability that allows remote attackers to gain access to sensitive information through the Web3 authentication process...

CVE-2023-50053

An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce random number...

CVE-2023-50059

The Galxe platform version 1.0 is vulnerable to a security flaw in its Web3 authentication process . The root cause is that the signed message lacks a nonce (random number), which enables a Web3 Authentication Replay Attack . A remote attacker can exploit this to obtain sensitive information . As...

CVE-2023-50053

An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce random number...

CVE-2023-50059: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galxe, the signed message lacks a nonce random number...

CVE-2023-50053: Exposure of Private Personal Information to an Unauthorized Actor

An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce random number...

@blockworks-foundation/mango-client (>=3.0.14, <=3.2.23), @frakters/community-pools-client-library-v2 (>=1.0.7, <=1.0.9) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.21.0)

@solana/web3.js NPM version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @blockworks-foundation/mango-client =3.0.14, =1.0.7, =1.0.1, =2.2.3, =0.0.6, =1.0.0, =0.0.1, =1.0.0, =1.2.5, =1.0.0, =1.0.0, =0.2....

@bonfida/sns-reputation (>=0.0.1, <=0.0.7), @levelfinance/keeper (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.30.2)

@solana/web3.js NPM version 1.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @bonfida/sns-reputation =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@strata-foundation/governance-cli (>=3.11.0, <=3.11.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.22.0)

@solana/web3.js NPM version 1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @strata-foundation/governance-cli =3.11.0, =3.11.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@fabric-foundation/sdk (>=0.0.2, <=0.0.64), @zetamarkets/flex-sdk (0.1.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.18.0)

@solana/web3.js NPM version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.2, =0.6.15, =0.9.9 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

soltokenbalance (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.20.0)

@solana/web3.js NPM version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - soltokenbalance =1.0.0, =1.0.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

savour-snow (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.10.0)

@solana/web3.js NPM version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - savour-snow =1.0.0, =1.0.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@arb-protocol/core (>=2.0.0-alpha.1, <=2.0.0-alpha.5), @arb-protocol/jupiter-adapter (>=2.0.0-alpha.5, <=2.0.0-alpha.6) +80 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.31.0)

@solana/web3.js NPM version 1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @arb-protocol/core =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =2.20.0-rc.38, =1.0.1-rc.0, =0.0.1, =0.0.1, =1.0.0, =0.2.0,...

@audius/sdk (>=0.0.3-beta.1, <=3.0.8-beta.12), @audius/stems (>=1.5.2-beta.1, <=1.5.4) +14 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.37.0, <=1.37.2)

@solana/web3.js NPM version =1.37.0, =0.0.3-beta.1, =1.5.2-beta.1, =0.0.3, =0.0.1, =0.2.0, =1.5.1, =0.3.3, =3.2.8, =3.3.0 - @winter-love/wallet 1.0.25-alpha.14 - kyzr-marketplace-sdk 0.0.1 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@cardinal/namespaces-components (>=4.1.0, <=5.0.0), @frakters/fusion-pool (>=1.0.0, <=1.0.4) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.32.0)

@solana/web3.js NPM version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @cardinal/namespaces-components =4.1.0, =1.0.0, =0.0.29, =0.0.32 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

@axyzsdk/js (0.0.0), @axyzsdk/react (0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0, <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0-alpha.1, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@dialectlabs/react (>=0.4.8, <=0.5.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.38.0)

@solana/web3.js NPM version 1.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @dialectlabs/react =0.4.8, =0.5.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@hubbleprotocol/hubble-sdk (>=1.0.48, <=2.0.24), @streamflow/stream (>=3.0.14-dev, <=3.0.19) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.42.0)

@solana/web3.js NPM version 1.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @hubbleprotocol/hubble-sdk =1.0.48, =3.0.14-dev, =2.0.0-rc.1, =2.0.2 Source cves: CVE-2024-30253 Source advisory:...