{"action":"Upgrade @solana/web3.js to 1.0.1 or later.","affected":[{"fixed":"1.91.3","introduced":"1.91.0"},{"fixed":"1.90.2","introduced":"1.90"},{"fixed":"1.89.2","introduced":"1.89"},{"fixed":"1.88.1","introduced":"1.88.0"},{"fixed":"1.87.7","introduced":"1.87.0"},{"fixed":"1.86.1","introduced":"1.86.0"},{"fixed":"1.85.1","introduced":"1.85.0"},{"fixed":"1.84.1","introduced":"1.84.0"},{"fixed":"1.83.1","introduced":"1.83.0"},{"fixed":"1.82.1","introduced":"1.82.0"},{"fixed":"1.81.1","introduced":"1.81.0"},{"fixed":"1.80.1","introduced":"1.80.0"},{"fixed":"1.79.1","introduced":"1.79.0"},{"fixed":"1.78.8","introduced":"1.78"},{"fixed":"1.77.4","introduced":"1.77"},{"fixed":"1.76.1","introduced":"1.76.0"},{"fixed":"1.75.1","introduced":"1.75.0"},{"fixed":"1.74.1","introduced":"1.74.0"},{"fixed":"1.73.5","introduced":"1.73.0"},{"fixed":"1.72.1","introduced":"1.72.0"},{"fixed":"1.71.1","introduced":"1.71.0"},{"fixed":"1.70.4","introduced":"1.70.0"},{"fixed":"1.69.1","introduced":"1.69.0"},{"fixed":"1.68.2","introduced":"1.68.0"},{"fixed":"1.67.3","introduced":"1.67.0"},{"fixed":"1.66.6","introduced":"1.66.0"},{"fixed":"1.65.1","introduced":"1.65.0"},{"fixed":"1.64.1","introduced":"1.64.0"},{"fixed":"1.63.2","introduced":"1.63.0"},{"fixed":"1.62.2","introduced":"1.62.0"},{"fixed":"1.61.2","introduced":"1.61.0"},{"fixed":"1.60.1","introduced":"1.60.0"},{"fixed":"1.59.2","introduced":"1.59.0"},{"fixed":"1.58.1","introduced":"1.58.0"},{"fixed":"1.57.1","introduced":"1.57.0"},{"fixed":"1.56.3","introduced":"1.56.0"},{"fixed":"1.55.1","introduced":"1.55.0"},{"fixed":"1.54.2","introduced":"1.54.0"},{"fixed":"1.53.1","introduced":"1.53.0"},{"fixed":"1.52.1","introduced":"1.52.0"},{"fixed":"1.51.1","introduced":"1.51.0"},{"fixed":"1.50.2","introduced":"1.50.0"},{"fixed":"1.49.1","introduced":"1.49.0"},{"fixed":"1.48.1","introduced":"1.48.0"},{"fixed":"1.47.5","introduced":"1.47.0"},{"fixed":"1.46.1","introduced":"1.46.0"},{"fixed":"1.45.1","introduced":"1.45.0"},{"fixed":"1.44.4","introduced":"1.44.0"},{"fixed":"1.43.7","introduced":"1.43.0"},{"fixed":"1.42.1","introduced":"1.42.0"},{"fixed":"1.41.11","introduced":"1.41.0"},{"fixed":"1.40.2","introduced":"1.40.0"},{"fixed":"1.39.2","introduced":"1.39.0"},{"fixed":"1.38.1","introduced":"1.38.0"},{"fixed":"1.37.3","introduced":"1.37.0"},{"fixed":"1.36.1","introduced":"1.36.0"},{"fixed":"1.35.2","introduced":"1.35.0"},{"fixed":"1.34.1","introduced":"1.34.0"},{"fixed":"1.33.1","introduced":"1.33.0"},{"fixed":"1.32.2","introduced":"1.32.0"},{"fixed":"1.31.1","introduced":"1.31.0"},{"fixed":"1.30.3","introduced":"1.30.0"},{"fixed":"1.29.4","introduced":"1.29.0"},{"fixed":"1.28.1","introduced":"1.28.0"},{"fixed":"1.27.1","introduced":"1.27.0"},{"fixed":"1.26.1","introduced":"1.26.0"},{"fixed":"1.25.1","introduced":"1.25.0"},{"fixed":"1.24.3","introduced":"1.24.0"},{"fixed":"1.23.1","introduced":"1.23.0"},{"fixed":"1.22.1","introduced":"1.22.0"},{"fixed":"1.21.1","introduced":"1.21.0"},{"fixed":"1.20.3","introduced":"1.20.0"},{"fixed":"1.19.1","introduced":"1.19.0"},{"fixed":"1.18.1","introduced":"1.18.0"},{"fixed":"1.17.1","introduced":"1.17.0"},{"fixed":"1.16.2","introduced":"1.16.0"},{"fixed":"1.15.1","introduced":"1.15.0"},{"fixed":"1.14.1","introduced":"1.14.0"},{"fixed":"1.13.1","introduced":"1.13.0"},{"fixed":"1.12.1","introduced":"1.12.0"},{"fixed":"1.11.1","introduced":"1.11.0"},{"fixed":"1.10.2","introduced":"1.10.0"},{"fixed":"1.9.2","introduced":"1.9.0"},{"fixed":"1.8.1","introduced":"1.8.0"},{"fixed":"1.7.2","introduced":"1.7.0"},{"fixed":"1.6.1","introduced":"1.6.0"},{"fixed":"1.5.1","introduced":"1.5.0"},{"fixed":"1.4.1","introduced":"1.4.0"},{"fixed":"1.3.1","introduced":"1.3.0"},{"fixed":"1.2.8","introduced":"1.2.0"},{"fixed":"1.1.2","introduced":"1.1.0"},{"fixed":"1.0.1","introduced":"0"}],"component":"@solana/web3.js","cve_ids":["CVE-2024-30253"],"ecosystem":"npm","epss":0.00593,"exploited":false,"fixed_versions":["1.91.3","1.90.2","1.89.2","1.88.1","1.87.7","1.86.1","1.85.1","1.84.1","1.83.1","1.82.1","1.81.1","1.80.1","1.79.1","1.78.8","1.77.4","1.76.1","1.75.1","1.74.1","1.73.5","1.72.1","1.71.1","1.70.4","1.69.1","1.68.2","1.67.3","1.66.6","1.65.1","1.64.1","1.63.2","1.62.2","1.61.2","1.60.1","1.59.2","1.58.1","1.57.1","1.56.3","1.55.1","1.54.2","1.53.1","1.52.1","1.51.1","1.50.2","1.49.1","1.48.1","1.47.5","1.46.1","1.45.1","1.44.4","1.43.7","1.42.1","1.41.11","1.40.2","1.39.2","1.38.1","1.37.3","1.36.1","1.35.2","1.34.1","1.33.1","1.32.2","1.31.1","1.30.3","1.29.4","1.28.1","1.27.1","1.26.1","1.25.1","1.24.3","1.23.1","1.22.1","1.21.1","1.20.3","1.19.1","1.18.1","1.17.1","1.16.2","1.15.1","1.14.1","1.13.1","1.12.1","1.11.1","1.10.2","1.9.2","1.8.1","1.7.2","1.6.1","1.5.1","1.4.1","1.3.1","1.2.8","1.1.2","1.0.1"],"ghsa_id":"GHSA-8m45-2rjm-j347","id":"tcs_01M5KFDDEHZXFS7FNWP2Q51BK4","modified_at":"2026-09-10T03:50:12.722446210Z","published_at":"2024-04-17T18:21:18Z","references":["https://osv.dev/vulnerability/GHSA-8m45-2rjm-j347","https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347","https://nvd.nist.gov/vuln/detail/CVE-2024-30253","https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0","https://github.com/solana-labs/solana-web3.js"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8m45-2rjm-j347","url":"https://osv.dev/vulnerability/GHSA-8m45-2rjm-j347"}],"summary":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service"}