CVE-2024-54134
1 advisory.
npm/@solana/web3.js CVE-2024-54134: high 8.3
Modified package published to npm, containing malware that exfiltrates private key material
Action: Upgrade @solana/web3.js to 1.95.8 or later.
npm i @solana/web3.js@1.95.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.95.6 | 1.95.8 | - |
Fixed versions
| 1.95.8 |
Sources
- osv: GHSA-jcxm-7wvp-g6p5
- nvd: CVE-2024-54134
- https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5
- https://github.com/advisories/GHSA-2mhj-xmf4-pr8m
- https://github.com/solana-labs/solana-web3.js
CVE-2024-54134 · published · modified · JSON