@audius/sdk (>=0.0.3-beta.1, <=3.0.8-beta.12), @audius/stems (>=1.5.2-beta.1, <=1.5.4) +14 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.37.0, <=1.37.2)

@solana/web3.js NPM version =1.37.0, =0.0.3-beta.1, =1.5.2-beta.1, =0.0.3, =0.0.1, =0.2.0, =1.5.1, =0.3.3, =3.2.8, =3.3.0 - @winter-love/wallet 1.0.25-alpha.14 - kyzr-marketplace-sdk 0.0.1 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@civic/civic-sign (>=0.0.4, <=0.0.14), @civic/serum (>=0.17.3, <=0.17.4) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.39.0, <=1.39.1)

@solana/web3.js NPM version =1.39.0, =0.0.4, =0.17.3, =0.3.1-3.beta.1, =0.0.1, =0.2.1, =3.4.1, =2.0.0-beta.1, =0.4.3, =3.11.8, =3.11.14 - winto-sdk 1.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@altruism-finance/js (>=0.1.0, <=0.1.1), @sh-coins/solana (>=0.3.0, <=0.3.8) potentially affected by CVE-2024-30253 via @solana/web3.js (1.52.0)

@solana/web3.js NPM version 1.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @altruism-finance/js =0.1.0, =0.3.0, =0.3.8 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@aloe2/account-lib (2.20.20228282226), @aloe2/bitgo (14.2.20228282226) +11 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.56.0, <=1.56.2)

@solana/web3.js NPM version =1.56.0, =2.20.0, =14.2.0, =1.0.1, =2.0.0-rc.18, =8.0.1, =3.0.0-alpha.12, =3.1.2-beta.0, =2.2.33, =2.0.1-alpha.412, =7.0.0, =8.0.2 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@brave/wallet-standard-brave (>=0.0.8, <=0.0.12), @oraichain/owallet-wallet-standard (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.58.0)

@solana/web3.js NPM version 1.58.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @brave/wallet-standard-brave =0.0.8, =0.1.0, =0.1.6, =0.1.10 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@debridge-finance/solana-contracts-client (>=0.1.0, <=1.0.0), @debridge-finance/solana-utils (1.0.2) potentially affected by CVE-2024-30253 via @solana/web3.js (1.62.0)

@solana/web3.js NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-contracts-client =0.1.0, =1.0.0 - @debridge-finance/solana-utils 1.0.2 Source cves: CVE-2024-30253 Source...

@civic/civic-link (>=0.0.5, <=0.0.8-beta.1) potentially affected by CVE-2024-30253 via @solana/web3.js (1.65.0)

@solana/web3.js NPM version 1.65.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @civic/civic-link =0.0.5, =0.0.8-beta.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@dynamic-labs/blocto-evm (>=0.19.0-alpha.21, <=2.1.0-alpha.0), @dynamic-labs/ethereum (>=0.17.0-RC.9, <=2.1.0-alpha.0) +19 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.70.1, <=1.70.3)

@solana/web3.js NPM version =1.70.1, =0.19.0-alpha.21, =0.17.0-RC.9, =2.0.0-alpha.31, =0.18.100-viem.1, =0.15.1-minimal.0, =2.0.0-alpha.4, =0.17.0-RC.7, =0.17.0-RC.7, =0.17.0-RC.10, =0.19.3, =0.19.0-alpha.13, =0.3.1-rc.c6e524e, =2.1.0, =0.1.18, =0.0.23, =0.0.28 and more Source cves: CVE-2024-3025...

@debridge-finance/solana-grpc (>=1.1.2, <=1.1.3), @mochi-web3/connect-wallet-widget (>=0.0.7, <=0.2.10) +2 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.74.0)

@solana/web3.js NPM version 1.74.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @debridge-finance/solana-grpc =1.1.2, =0.0.7, =0.2.2, =1.194.0, =1.261.0 Source cves: CVE-2024-30253 Source advisory:...

@audius/fetch-nft (>=0.1.8-beta.1, <=0.2.6), @audius/sdk (>=3.0.8-beta.13, <=4.2.0) +52 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.78.0, <=1.78.7)

@solana/web3.js NPM version =1.78.0, =0.1.8-beta.1, =3.0.8-beta.13, =0.0.10, =2.20.1-beta.306, =14.2.1-beta.306, =2.2.3-alpha.61, =1.0.1-rc.0, =2.21.0-hotfix.0, =2.6.0, =0.0.5-beta.0, =1.1.0-alpha.1, =1.1.11 - @ctrl-tech/chains-controller 2.0.5 - @ctrl-tech/chains-solana 2.0.18 and more Source...

@3s-wallet-core/provider (>=0.0.2, <=0.0.3), @3s-wallet-core/wallet (0.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.87.2, <=1.87.6)

@solana/web3.js NPM version =1.87.2, =0.0.2, =0.0.6, =0.1.9, =2.0.3, =0.0.1-alpha.1, =0.0.2, =2.0.0-alpha.15, =0.1.3-rc.1, =3.0.4-1, =0.2.2, =1.11.3-nobnb, =1.0.0, =1.1.0 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

droplinked-payment-hub (>=0.1.3, <=0.2.37), droplinked-web3 (>=0.0.1, <=5.0.2) +3 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.88.0)

@solana/web3.js NPM version 1.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - droplinked-payment-hub =0.1.3, =0.0.1, =0.0.1, =0.0.1, =0.0.26 - expand-network 3.0.2 Source cves: CVE-2024-30253 Source advisory:...

@3s-wallet-core/provider (>=0.0.2, <=1.0.3), @3s-wallet-core/wallet (>=0.0.4, <=1.0.2) +23 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.89.0, <=1.89.1)

@solana/web3.js NPM version =1.89.0, =0.0.2, =0.0.4, =0.4.0-beta.25, =0.4.0-beta.30, =0.4.0-beta.30, =0.4.0-beta.30, =0.0.1, =0.0.2-beta.15, =2.34.0-rc.1, =0.0.1, =0.0.1, =0.0.1-beta, =0.4.0-beta.2, =0.4.0-beta.0, =0.1.8-beta.8, =0.4.6 and more Source cves: CVE-2024-30253 Source advisory:...

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability...

CVE-2024-30253 Handling untrusted input can result in a crash, leading to loss of availability / denial of service

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

CVE-2024-30253: Improper Restriction of Operations within the Bounds of a Memory Buffer

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

PT-2024-23300 · Solana · @Solana/Web3.Js

Name of the Vulnerable Software and Affected Versions: @solana/web3.js versions prior to 1.0.1 @solana/web3.js versions prior to 1.10.2 @solana/web3.js versions prior to 1.11.1 @solana/web3.js versions prior to 1.12.1 @solana/web3.js versions prior to 1.1.2 @solana/web3.js versions prior to 1.13....

web3.js 安全漏洞

Web3.js is a TypeScript implementation of the Ethernet JSON RPC API open-sourced by Web3 and related tools maintained by ChainSafe Systems. A security vulnerability exists in solana/web3.js that stems from allowing an attacker to cause an out-of-memory OOM using specific input...

GAM3S.GG and Immutable Announce Partnership for Web3 Gaming Expansion

By Uzair Amir The partnership will bring millions of players into the Immutable web3 ecosystem while providing GAM3S.GG with the leading web3 gaming platform on the market. This is a post from HackRead.com Read the original post: GAM3S.GG and Immutable Announce Partnership for Web3 Gaming Expansi...

Web3 Security Specialist Hypernative To Provide Proactive Protection To The Flare Ecosystem

By Owais Sultan Institutions, dApps and users on Flare will now benefit from Hypernative’s industry-leading ecosystem-wide protection suite. This is a post from HackRead.com Read the original post: Web3 Security Specialist Hypernative To Provide Proactive Protection To The Flare Ecosystem...