bigint-buffer-safe

bigint-buffer-safe 安全、纯 JS 的 bigint-buffer 替代品。修复了 CVE-2025-3194（CVSS 7.5，缓冲区溢出/拒绝服务）。 零依赖。无原生绑定。适用于 Node.js 和浏览器。 为什么存在？ 原始 bigint-buffer 包存在高危缓冲区溢出漏洞 （CVE-2025-3194，CVSS 7.5），当传递 toBigIntLEnull 或其他无效输入时会崩溃进程。维护者自 2019 年 10 月以来未发布更新。依赖它的 @solana/buffer-layout-utils 包已于 2025 年 1 月归档。上游修复无望。...

@glow-app/glow-react (>=0.6.0, <=1.0.1), @glow-app/solana-client (>=0.5.2, <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0, <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20-beta-1, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

8,000 Solana Wallets Drained Millions Worth of Crypto in Cyberattack

By Waqas An unknown hacker targeted the Solana ecosystem on Wednesday and drained approx. $5 million worth of SOL and… This is a post from HackRead.com Read the original post: 8,000 Solana Wallets Drained Millions Worth of Crypto in Cyberattack...