@civic/civic-link (>=0.0.5 <=0.0.8-beta.1) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.65.0)

@solana/web3.js NPM version =1.65.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/civic-link =0.0.5, =0.0.8-beta.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@drift-labs/sdk (>=0.2.0-master.0 <=0.2.0-temp.2), goosefx-ssl-sdk-prism (>=1.0.0 <=1.0.7) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.41.0 <=1.41.1)

@solana/web3.js NPM version =1.41.0, =0.2.0-master.0, =1.0.0, =1.0.7 - winto-sdk =1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@axyzsdk/js (=0.0.0), @axyzsdk/react (=0.0.0) +4 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.35.0 <=1.35.1)

@solana/web3.js NPM version =1.35.0, =3.0.7, =1.0.0, =0.0.1-rc.1, =0.0.1-rc.3, =0.0.2-rc.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@fabric-foundation/sdk (>=0.0.65 <=1.0.2-beta.6), @frakt-protocol/frakt-sdk (>=0.0.7 <=0.0.9) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.34.0)

@solana/web3.js NPM version =1.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.65, =0.0.7, =3.0.4, =3.0.6 - @toruslabs/solana-embed =0.1.4 Source cves: CVE-2024-30253 Source...

@arb-protocol/core (>=2.0.0-alpha.1 <=2.0.0-alpha.5), @arb-protocol/jupiter-adapter (>=2.0.0-alpha.5 <=2.0.0-alpha.6) +80 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.31.0)

@solana/web3.js NPM version =1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @arb-protocol/core =2.0.0-alpha.1, =2.0.0-alpha.5, =2.0.0-alpha.1, =2.20.0, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.0....

@strata-foundation/governance-cli (>=3.11.0 <=3.11.2) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.22.0)

@solana/web3.js NPM version =1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @strata-foundation/governance-cli =3.11.0, =3.11.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@glow-app/glow-react (>=0.6.0 <=1.0.1), @glow-app/solana-client (>=0.5.2 <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0 <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@jup-ag/core (>=3.0.0-beta.0 <=3.0.0-beta.8-eacba78), @jup-ag/react-hook (>=3.0.0-beta.0 <=3.0.0-beta.8-eacba78) +7 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.63.0 <=1.63.1)

@solana/web3.js NPM version =1.63.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.1-0d5b39f4.0, =0.0.1-0f199db9.0, =4.0.0-maple-1, =0.1.0, =1.4.8, =1.0.0, =1.7.1-alpha.4 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@convexitydmcc/wallet-adapter-walletconnect (>=2.0.0-beta.26 <=2.0.0-rc.5), @renec-foundation/gasless-sdk (>=0.2.3 <=0.2.6) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.48.0)

@solana/web3.js NPM version =1.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @convexitydmcc/wallet-adapter-walletconnect =2.0.0-beta.26, =0.2.3, =3.0.0, =6.3.0-profits-mercurial-rc8 Source cves:...

@axyzsdk/js (>=0.1.0 <=0.2.1), @axyzsdk/react (>=0.1.0 <=0.2.1) +13 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.36.0)

@solana/web3.js NPM version =1.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @axyzsdk/js =0.1.0, =0.1.0, =0.0.7, =0.0.2, =0.0.3, =2.0.8, =0.1.46, =1.1.135, =0.1.0, =0.3.0, =0.0.4, =0.7.0, =3.1.7,...

@abytecurious/serum (>=0.13.38 <=0.13.39), @arkecosystem/platform-sdk-sol (>=3.0.31 <=6.0.8) +66 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=0.0.3 <=0.95.0)

@solana/web3.js NPM version =0.0.3, =0.13.38, =3.0.31, =0.0.1, =0.13.14, =0.1.0, =0.0.4, =1.0.1, =1.0.7, =1.0.1, =2.2.3, =0.0.6, =1.0.0, =1.1.0 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@audius/fetch-nft (>=0.1.8-beta.1 <=0.2.6), @audius/sdk (>=3.0.8-beta.13 <=4.2.0) +50 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.78.0 <=1.78.7)

@solana/web3.js NPM version =1.78.0, =0.1.8-beta.1, =3.0.8-beta.13, =0.0.10, =2.20.1-beta.306, =14.2.1-beta.306, =2.2.3-alpha.61, =1.0.1-rc.0, =2.21.0, =2.6.0, =0.0.5-beta.0, =1.1.0, =1.1.11 - @ctrl-tech/chains-controller =2.0.5 - @ctrl-tech/chains-solana =2.0.18 and more Source cves:...

@bonfida/sns-reputation (>=0.0.1 <=0.0.7), @levelfinance/keeper (>=0.1.0 <=0.1.2) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.30.2)

@solana/web3.js NPM version =1.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @bonfida/sns-reputation =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@civic/multichain-connect-react-solana-wallet-adapter (>=0.0.0-alpha.1 <=0.0.3-beta.11), @debridge-finance/dln-client (>=5.1.0 <=8.2.2) +6 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.76.0)

@solana/web3.js NPM version =1.76.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/multichain-connect-react-solana-wallet-adapter =0.0.0-alpha.1, =5.1.0, =2.11.0, =1.0.0, =0.1.1-alpha.8, =0.3.2-alpha.2,...

@debridge-finance/solana-contracts-client (>=0.1.0 <=1.0.0), @debridge-finance/solana-utils (=1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (=1.62.0)

@solana/web3.js NPM version =1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils =1.0.2 Source cves: CVE-2024-30253 Sour...

@hubbleprotocol/hubble-sdk (>=1.0.48 <=2.0.24), @streamflow/stream (>=3.0.14-dev <=3.0.19) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.42.0)

@solana/web3.js NPM version =1.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @hubbleprotocol/hubble-sdk =1.0.48, =3.0.14-dev, =2.0.0, =2.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

@fabric-foundation/sdk (>=0.0.2 <=0.0.64), @zetamarkets/flex-sdk (=0.1.0) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.18.0)

@solana/web3.js NPM version =1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @fabric-foundation/sdk =0.0.2, =0.6.15, =0.9.9 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

GHSA-8M45-2RJM-J347 Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability...

@alphabatem/metaplex-shadow-drive (>=2.0.4 <=2.0.5), @builderdao/apis (>=0.0.4 <=0.0.8) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.33.0)

@solana/web3.js NPM version =1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @alphabatem/metaplex-shadow-drive =2.0.4, =0.0.4, =0.0.2, =0.0.3 Source cves: CVE-2024-30253 Source advisory:...

@jup-ag/dca-v2-sdk (>=0.0.0-beta-1 <=0.0.0-beta-9), @jup-ag/smart-wallet (>=0.0.0-beta-1 <=0.0.0-beta-56) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (=1.75.0)

@solana/web3.js NPM version =1.75.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @jup-ag/dca-v2-sdk =0.0.0-beta-1, =0.0.0-beta-1, =0.0.31, =1.0.3 Source cves: CVE-2024-30253 Source advisory:...