CVE-2023-30543
4 advisories.
npm/@web3-react/coinbase-wallet CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/coinbase-wallet to 8.0.35-beta.0 or later.
npm i @web3-react/coinbase-wallet@8.0.35-beta.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.35-beta.0 | - |
Fixed versions
| 8.0.35-beta.0 |
Sources
- osv: GHSA-8pf3-6fgr-3g3g
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON
npm/@web3-react/eip1193 CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/eip1193 to 8.0.27-beta or later.
npm i @web3-react/eip1193@8.0.27-betaAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.27-beta | - |
Fixed versions
| 8.0.27-beta |
Sources
- osv: GHSA-8pf3-6fgr-3g3g#npm/@web3-react/eip1193
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON
npm/@web3-react/metamask CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/metamask to 8.0.30-beta.0 or later.
npm i @web3-react/metamask@8.0.30-beta.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.30-beta.0 | - |
Fixed versions
| 8.0.30-beta.0 |
Sources
- osv: GHSA-8pf3-6fgr-3g3g#npm/@web3-react/metamask
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON
npm/@web3-react/walletconnect CVE-2023-30543: medium 5.2, EPSS 0.38%
`chainId` may be outdated if user changes chains as part of connection in @web3-react
Action: Upgrade @web3-react/walletconnect to 8.0.37-beta.0 or later.
npm i @web3-react/walletconnect@8.0.37-beta.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 8.0.37-beta.0 | - |
Fixed versions
| 8.0.37-beta.0 |
Sources
- osv: GHSA-8pf3-6fgr-3g3g#npm/@web3-react/walletconnect
- https://github.com/Uniswap/web3-react/security/advisories/GHSA-8pf3-6fgr-3g3g
- https://nvd.nist.gov/vuln/detail/CVE-2023-30543
- https://github.com/Uniswap/web3-react/pull/749
- https://github.com/Uniswap/web3-react
CVE-2023-30543 · published · modified · JSON