npm/@web3-react/coinbase-wallet CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/coinbase-wallet to 8.0.35-beta.0 or later.
npm i @web3-react/coinbase-wallet@8.0.35-beta.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.35-beta.0 | - |
Fixed versions
| 8.0.35-beta.0 |
Sources
- osv: GHSA-8pf3-6fgr-3g3g
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON