GHSA-8M45-2RJM-J347
Vulnerability from github – Published: 2024-04-17 18:21 – Updated: 2024-04-17 21:29
VLAI?
Summary
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Details
Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).
If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.
Severity ?
7.5 (High)
{
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.91.0"
},
{
"fixed": "1.91.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.90"
},
{
"fixed": "1.90.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.89"
},
{
"fixed": "1.89.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.88.0"
},
{
"fixed": "1.88.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.88.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.87.0"
},
{
"fixed": "1.87.7"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.86.0"
},
{
"fixed": "1.86.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.86.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.85.0"
},
{
"fixed": "1.85.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.85.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.84.0"
},
{
"fixed": "1.84.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.84.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.83.0"
},
{
"fixed": "1.83.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.83.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.82.0"
},
{
"fixed": "1.82.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.82.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.81.0"
},
{
"fixed": "1.81.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.81.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.80.0"
},
{
"fixed": "1.80.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.80.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.79.0"
},
{
"fixed": "1.79.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.79.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.78"
},
{
"fixed": "1.78.8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.77"
},
{
"fixed": "1.77.4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.76.0"
},
{
"fixed": "1.76.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.76.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.75.0"
},
{
"fixed": "1.75.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.75.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.74.0"
},
{
"fixed": "1.74.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.74.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.73.0"
},
{
"fixed": "1.73.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.72.0"
},
{
"fixed": "1.72.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.72.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.71.0"
},
{
"fixed": "1.71.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.71.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.70.0"
},
{
"fixed": "1.70.4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.69.0"
},
{
"fixed": "1.69.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.69.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.68.0"
},
{
"fixed": "1.68.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.67.0"
},
{
"fixed": "1.67.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.66.0"
},
{
"fixed": "1.66.6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.65.0"
},
{
"fixed": "1.65.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.65.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.64.0"
},
{
"fixed": "1.64.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.64.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.63.0"
},
{
"fixed": "1.63.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.62.0"
},
{
"fixed": "1.62.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.61.0"
},
{
"fixed": "1.61.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.60.0"
},
{
"fixed": "1.60.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.60.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.59.0"
},
{
"fixed": "1.59.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.58.0"
},
{
"fixed": "1.58.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.58.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.57.0"
},
{
"fixed": "1.57.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.57.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.56.0"
},
{
"fixed": "1.56.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.55.0"
},
{
"fixed": "1.55.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.55.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.54.0"
},
{
"fixed": "1.54.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.53.0"
},
{
"fixed": "1.53.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.53.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.52.0"
},
{
"fixed": "1.52.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.52.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.51.0"
},
{
"fixed": "1.51.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.51.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.50.0"
},
{
"fixed": "1.50.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.49.0"
},
{
"fixed": "1.49.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.49.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.48.0"
},
{
"fixed": "1.48.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.48.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.47.0"
},
{
"fixed": "1.47.5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.46.0"
},
{
"fixed": "1.46.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.46.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.45.0"
},
{
"fixed": "1.45.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.45.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.44.0"
},
{
"fixed": "1.44.4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.43.0"
},
{
"fixed": "1.43.7"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.42.0"
},
{
"fixed": "1.42.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.42.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.41.0"
},
{
"fixed": "1.41.11"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.40.0"
},
{
"fixed": "1.40.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.39.0"
},
{
"fixed": "1.39.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.38.0"
},
{
"fixed": "1.38.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.38.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.37.0"
},
{
"fixed": "1.37.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.36.0"
},
{
"fixed": "1.36.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.36.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.35.0"
},
{
"fixed": "1.35.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.34.0"
},
{
"fixed": "1.34.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.34.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.33.0"
},
{
"fixed": "1.33.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.33.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.32.0"
},
{
"fixed": "1.32.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.31.0"
},
{
"fixed": "1.31.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.31.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.30.0"
},
{
"fixed": "1.30.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.29.0"
},
{
"fixed": "1.29.4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.28.0"
},
{
"fixed": "1.28.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.28.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.27.0"
},
{
"fixed": "1.27.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.27.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.26.0"
},
{
"fixed": "1.26.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.26.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.25.0"
},
{
"fixed": "1.25.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.25.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.24.0"
},
{
"fixed": "1.24.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.23.0"
},
{
"fixed": "1.23.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.23.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.22.0"
},
{
"fixed": "1.22.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.22.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.21.0"
},
{
"fixed": "1.21.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.21.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.20.0"
},
{
"fixed": "1.20.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.19.0"
},
{
"fixed": "1.19.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.19.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.18.0"
},
{
"fixed": "1.18.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.18.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.17.0"
},
{
"fixed": "1.17.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.17.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.16.0"
},
{
"fixed": "1.16.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.15.0"
},
{
"fixed": "1.15.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.15.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.14.0"
},
{
"fixed": "1.14.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.14.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.13.0"
},
{
"fixed": "1.13.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.13.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.12.0"
},
{
"fixed": "1.12.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.12.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.11.0"
},
{
"fixed": "1.11.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.11.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.10.0"
},
{
"fixed": "1.10.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.9.0"
},
{
"fixed": "1.9.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.8.0"
},
{
"fixed": "1.8.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.8.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.7.0"
},
{
"fixed": "1.7.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.6.0"
},
{
"fixed": "1.6.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.6.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.5.0"
},
{
"fixed": "1.5.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.5.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.4.0"
},
{
"fixed": "1.4.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.4.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.3.0"
},
{
"fixed": "1.3.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.3.0"
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.2.0"
},
{
"fixed": "1.2.8"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "1.1.0"
},
{
"fixed": "1.1.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "npm",
"name": "@solana/web3.js"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2024-30253"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": true,
"github_reviewed_at": "2024-04-17T18:21:18Z",
"nvd_published_at": "2024-04-17T15:15:07Z",
"severity": "HIGH"
},
"details": "Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).\n\nIf you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.",
"id": "GHSA-8m45-2rjm-j347",
"modified": "2024-04-17T21:29:10Z",
"published": "2024-04-17T18:21:18Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30253"
},
{
"type": "WEB",
"url": "https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0"
},
{
"type": "PACKAGE",
"url": "https://github.com/solana-labs/solana-web3.js"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Handling untrusted input can result in a crash, leading to loss of availability / denial of service"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…