tocsin

CVE-2024-30253

1 advisory.

npm/@solana/web3.js CVE-2024-30253: high 7.5, EPSS 0.59%

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Action: Upgrade @solana/web3.js to 1.0.1 or later.

npm i @solana/web3.js@1.91.3
npm i @solana/web3.js@1.90.2
npm i @solana/web3.js@1.89.2
npm i @solana/web3.js@1.88.1
npm i @solana/web3.js@1.87.7
npm i @solana/web3.js@1.86.1
npm i @solana/web3.js@1.85.1
npm i @solana/web3.js@1.84.1
npm i @solana/web3.js@1.83.1
npm i @solana/web3.js@1.82.1
npm i @solana/web3.js@1.81.1
npm i @solana/web3.js@1.80.1
npm i @solana/web3.js@1.79.1
npm i @solana/web3.js@1.78.8
npm i @solana/web3.js@1.77.4
npm i @solana/web3.js@1.76.1
npm i @solana/web3.js@1.75.1
npm i @solana/web3.js@1.74.1
npm i @solana/web3.js@1.73.5
npm i @solana/web3.js@1.72.1
npm i @solana/web3.js@1.71.1
npm i @solana/web3.js@1.70.4
npm i @solana/web3.js@1.69.1
npm i @solana/web3.js@1.68.2
npm i @solana/web3.js@1.67.3
npm i @solana/web3.js@1.66.6
npm i @solana/web3.js@1.65.1
npm i @solana/web3.js@1.64.1
npm i @solana/web3.js@1.63.2
npm i @solana/web3.js@1.62.2
npm i @solana/web3.js@1.61.2
npm i @solana/web3.js@1.60.1
npm i @solana/web3.js@1.59.2
npm i @solana/web3.js@1.58.1
npm i @solana/web3.js@1.57.1
npm i @solana/web3.js@1.56.3
npm i @solana/web3.js@1.55.1
npm i @solana/web3.js@1.54.2
npm i @solana/web3.js@1.53.1
npm i @solana/web3.js@1.52.1
npm i @solana/web3.js@1.51.1
npm i @solana/web3.js@1.50.2
npm i @solana/web3.js@1.49.1
npm i @solana/web3.js@1.48.1
npm i @solana/web3.js@1.47.5
npm i @solana/web3.js@1.46.1
npm i @solana/web3.js@1.45.1
npm i @solana/web3.js@1.44.4
npm i @solana/web3.js@1.43.7
npm i @solana/web3.js@1.42.1
npm i @solana/web3.js@1.41.11
npm i @solana/web3.js@1.40.2
npm i @solana/web3.js@1.39.2
npm i @solana/web3.js@1.38.1
npm i @solana/web3.js@1.37.3
npm i @solana/web3.js@1.36.1
npm i @solana/web3.js@1.35.2
npm i @solana/web3.js@1.34.1
npm i @solana/web3.js@1.33.1
npm i @solana/web3.js@1.32.2
npm i @solana/web3.js@1.31.1
npm i @solana/web3.js@1.30.3
npm i @solana/web3.js@1.29.4
npm i @solana/web3.js@1.28.1
npm i @solana/web3.js@1.27.1
npm i @solana/web3.js@1.26.1
npm i @solana/web3.js@1.25.1
npm i @solana/web3.js@1.24.3
npm i @solana/web3.js@1.23.1
npm i @solana/web3.js@1.22.1
npm i @solana/web3.js@1.21.1
npm i @solana/web3.js@1.20.3
npm i @solana/web3.js@1.19.1
npm i @solana/web3.js@1.18.1
npm i @solana/web3.js@1.17.1
npm i @solana/web3.js@1.16.2
npm i @solana/web3.js@1.15.1
npm i @solana/web3.js@1.14.1
npm i @solana/web3.js@1.13.1
npm i @solana/web3.js@1.12.1
npm i @solana/web3.js@1.11.1
npm i @solana/web3.js@1.10.2
npm i @solana/web3.js@1.9.2
npm i @solana/web3.js@1.8.1
npm i @solana/web3.js@1.7.2
npm i @solana/web3.js@1.6.1
npm i @solana/web3.js@1.5.1
npm i @solana/web3.js@1.4.1
npm i @solana/web3.js@1.3.1
npm i @solana/web3.js@1.2.8
npm i @solana/web3.js@1.1.2
npm i @solana/web3.js@1.0.1

Affected

introducedfixedlast affected
1.91.01.91.3-
1.901.90.2-
1.891.89.2-
1.88.01.88.1-
1.87.01.87.7-
1.86.01.86.1-
1.85.01.85.1-
1.84.01.84.1-
1.83.01.83.1-
1.82.01.82.1-
1.81.01.81.1-
1.80.01.80.1-
1.79.01.79.1-
1.781.78.8-
1.771.77.4-
1.76.01.76.1-
1.75.01.75.1-
1.74.01.74.1-
1.73.01.73.5-
1.72.01.72.1-
1.71.01.71.1-
1.70.01.70.4-
1.69.01.69.1-
1.68.01.68.2-
1.67.01.67.3-
1.66.01.66.6-
1.65.01.65.1-
1.64.01.64.1-
1.63.01.63.2-
1.62.01.62.2-
1.61.01.61.2-
1.60.01.60.1-
1.59.01.59.2-
1.58.01.58.1-
1.57.01.57.1-
1.56.01.56.3-
1.55.01.55.1-
1.54.01.54.2-
1.53.01.53.1-
1.52.01.52.1-
1.51.01.51.1-
1.50.01.50.2-
1.49.01.49.1-
1.48.01.48.1-
1.47.01.47.5-
1.46.01.46.1-
1.45.01.45.1-
1.44.01.44.4-
1.43.01.43.7-
1.42.01.42.1-
1.41.01.41.11-
1.40.01.40.2-
1.39.01.39.2-
1.38.01.38.1-
1.37.01.37.3-
1.36.01.36.1-
1.35.01.35.2-
1.34.01.34.1-
1.33.01.33.1-
1.32.01.32.2-
1.31.01.31.1-
1.30.01.30.3-
1.29.01.29.4-
1.28.01.28.1-
1.27.01.27.1-
1.26.01.26.1-
1.25.01.25.1-
1.24.01.24.3-
1.23.01.23.1-
1.22.01.22.1-
1.21.01.21.1-
1.20.01.20.3-
1.19.01.19.1-
1.18.01.18.1-
1.17.01.17.1-
1.16.01.16.2-
1.15.01.15.1-
1.14.01.14.1-
1.13.01.13.1-
1.12.01.12.1-
1.11.01.11.1-
1.10.01.10.2-
1.9.01.9.2-
1.8.01.8.1-
1.7.01.7.2-
1.6.01.6.1-
1.5.01.5.1-
1.4.01.4.1-
1.3.01.3.1-
1.2.01.2.8-
1.1.01.1.2-
01.0.1-

Fixed versions

1.91.31.90.21.89.21.88.11.87.71.86.11.85.11.84.11.83.11.82.11.81.11.80.11.79.11.78.81.77.41.76.11.75.11.74.11.73.51.72.11.71.11.70.41.69.11.68.21.67.31.66.61.65.11.64.11.63.21.62.21.61.21.60.11.59.21.58.11.57.11.56.31.55.11.54.21.53.11.52.11.51.11.50.21.49.11.48.11.47.51.46.11.45.11.44.41.43.71.42.11.41.111.40.21.39.21.38.11.37.31.36.11.35.21.34.11.33.11.32.21.31.11.30.31.29.41.28.11.27.11.26.11.25.11.24.31.23.11.22.11.21.11.20.31.19.11.18.11.17.11.16.21.15.11.14.11.13.11.12.11.11.11.10.21.9.21.8.11.7.21.6.11.5.11.4.11.3.11.2.81.1.21.0.1

Sources

CVE-2024-30253 · published · modified · JSON