CVE-2024-21505
1 advisory.
npm/web3-utils CVE-2024-21505: high 7.5, EPSS 0.71%
web3-utils Prototype Pollution vulnerability
Action: Upgrade web3-utils to 4.2.1 or later.
npm i web3-utils@4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.1 | 4.2.1 | - |
Fixed versions
| 4.2.1 |
Sources
- osv: GHSA-2g4c-8fpm-c46v
- https://github.com/web3/web3.js/security/advisories/GHSA-2g4c-8fpm-c46v
- https://nvd.nist.gov/vuln/detail/CVE-2024-21505
- https://github.com/web3/web3.js/commit/8ed041c6635d807b3da8960ad49e125e3d1b0e80
- https://github.com/web3/web3.js
- https://security.snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337
CVE-2024-21505 · published · modified · JSON