Packages / @solana/web3.js / Security

HighVulnerabilityGHSA-8m45-2rjm-j347CVE-2024-30253Published 17 Apr 2024

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Affected releases · @solana/web3.js

  • 1.x1.0.0 – 1.91.2Fixed in 1.91.3
  • 0.98.x and older0.0.1 – 0.98.0No fix, no longer updated

On 1.x, the newest line:

npm install @solana/web3.js@1.91.3
3.x

  1. Not affected

    3.0.0 – 3.1.1

    5 releases, latest

1.x

  1. Affected

    1.0.0

    1 release

  2. Fixed

    1.0.1

    1 release

  3. Affected

    1.1.0 – 1.1.1

    2 releases

  4. Fixed

    1.1.2

    1 release

  5. Affected

    1.2.0 – 1.2.7

    8 releases

  6. Fixed

    1.2.8

    1 release

  7. Affected

    1.3.0

    1 release

  8. Fixed

    1.3.1

    1 release

  9. Affected

    1.4.0

    1 release

  10. Fixed

    1.4.1

    1 release

  11. Affected

    1.5.0

    1 release

  12. Fixed

    1.5.1

    1 release

  13. Affected

    1.6.0

    1 release

  14. Fixed

    1.6.1

    1 release

  15. Affected

    1.7.0 – 1.7.1

    2 releases

  16. Fixed

    1.7.2

    1 release

  17. Affected

    1.8.0

    1 release

  18. Fixed

    1.8.1

    1 release

  19. Affected

    1.9.0 – 1.9.1

    2 releases

  20. Fixed

    1.9.2

    1 release

  21. Affected

    1.10.0 – 1.10.1

    2 releases

  22. Fixed

    1.10.2

    1 release

  23. Affected

    1.11.0

    1 release

  24. Fixed

    1.11.1

    1 release

  25. Affected

    1.12.0

    1 release

  26. Fixed

    1.12.1

    1 release

  27. Affected

    1.13.0

    1 release

  28. Fixed

    1.13.1

    1 release

  29. Affected

    1.14.0

    1 release

  30. Fixed

    1.14.1

    1 release

  31. Affected

    1.15.0

    1 release

  32. Fixed

    1.15.1

    1 release

  33. Affected

    1.16.0 – 1.16.1

    2 releases

  34. Fixed

    1.16.2

    1 release

  35. Affected

    1.17.0

    1 release

  36. Fixed

    1.17.1

    1 release

  37. Affected

    1.18.0

    1 release

  38. Fixed

    1.18.1

    1 release

  39. Affected

    1.19.0

    1 release

  40. Fixed

    1.19.1

    1 release

  41. Affected

    1.20.0 – 1.20.2

    3 releases

  42. Fixed

    1.20.3

    1 release

  43. Affected

    1.21.0

    1 release

  44. Fixed

    1.21.1

    1 release

  45. Affected

    1.22.0

    1 release

  46. Fixed

    1.22.1

    1 release

  47. Affected

    1.23.0

    1 release

  48. Fixed

    1.23.1

    1 release

  49. Affected

    1.24.0 – 1.24.2

    3 releases

  50. Fixed

    1.24.3

    1 release

  51. Affected

    1.25.0

    1 release

  52. Fixed

    1.25.1

    1 release

  53. Affected

    1.26.0

    1 release

  54. Fixed

    1.26.1

    1 release

  55. Affected

    1.27.0

    1 release

  56. Fixed

    1.27.1

    1 release

  57. Affected

    1.28.0

    1 release

  58. Fixed

    1.28.1

    1 release

  59. Affected

    1.29.0 – 1.29.3

    4 releases

  60. Fixed

    1.29.4

    1 release

  61. Affected

    1.30.0 – 1.30.2

    3 releases

  62. Fixed

    1.30.3

    1 release

  63. Affected

    1.31.0

    1 release

  64. Fixed

    1.31.1

    1 release

  65. Affected

    1.32.0 – 1.32.1

    2 releases

  66. Fixed

    1.32.2 – 1.32.3

    2 releases

  67. Affected

    1.33.0

    1 release

  68. Fixed

    1.33.1

    1 release

  69. Affected

    1.34.0

    1 release

  70. Fixed

    1.34.1

    1 release

  71. Affected

    1.35.0 – 1.35.1

    2 releases

  72. Fixed

    1.35.2

    1 release

  73. Affected

    1.36.0

    1 release

  74. Fixed

    1.36.1

    1 release

  75. Affected

    1.37.0 – 1.37.2

    3 releases

  76. Fixed

    1.37.3

    1 release

  77. Affected

    1.38.0

    1 release

  78. Fixed

    1.38.1

    1 release

  79. Affected

    1.39.0 – 1.39.1

    2 releases

  80. Fixed

    1.39.2

    1 release

  81. Affected

    1.40.0 – 1.40.1

    2 releases

  82. Fixed

    1.40.2

    1 release

  83. Affected

    1.41.0 – 1.41.10

    11 releases

  84. Fixed

    1.41.11

    1 release

  85. Affected

    1.42.0

    1 release

  86. Fixed

    1.42.1

    1 release

  87. Affected

    1.43.0 – 1.43.6

    7 releases

  88. Fixed

    1.43.7

    1 release

  89. Affected

    1.44.0 – 1.44.3

    4 releases

  90. Fixed

    1.44.4

    1 release

  91. Affected

    1.45.0

    1 release

  92. Fixed

    1.45.1

    1 release

  93. Affected

    1.46.0

    1 release

  94. Fixed

    1.46.1

    1 release

  95. Affected

    1.47.0 – 1.47.4

    5 releases

  96. Fixed

    1.47.5

    1 release

  97. Affected

    1.48.0

    1 release

  98. Fixed

    1.48.1

    1 release

  99. Affected

    1.49.0

    1 release

  100. Fixed

    1.49.1

    1 release

  101. Affected

    1.50.0 – 1.50.1

    2 releases

  102. Fixed

    1.50.2

    1 release

  103. Affected

    1.51.0

    1 release

  104. Fixed

    1.51.1

    1 release

  105. Affected

    1.52.0

    1 release

  106. Fixed

    1.52.1

    1 release

  107. Affected

    1.53.0

    1 release

  108. Fixed

    1.53.1

    1 release

  109. Affected

    1.54.0 – 1.54.1

    2 releases

  110. Fixed

    1.54.2

    1 release

  111. Affected

    1.55.0

    1 release

  112. Fixed

    1.55.1

    1 release

  113. Affected

    1.56.0 – 1.56.2

    3 releases

  114. Fixed

    1.56.3

    1 release

  115. Affected

    1.57.0

    1 release

  116. Fixed

    1.57.1

    1 release

  117. Affected

    1.58.0

    1 release

  118. Fixed

    1.58.1

    1 release

  119. Affected

    1.59.0 – 1.59.1

    2 releases

  120. Fixed

    1.59.2

    1 release

  121. Affected

    1.60.0

    1 release

  122. Fixed

    1.60.1

    1 release

  123. Affected

    1.61.0 – 1.61.1

    2 releases

  124. Fixed

    1.61.2

    1 release

  125. Affected

    1.62.0 – 1.62.1

    2 releases

  126. Fixed

    1.62.2

    1 release

  127. Affected

    1.63.0 – 1.63.1

    2 releases

  128. Fixed

    1.63.2

    1 release

  129. Affected

    1.64.0

    1 release

  130. Fixed

    1.64.1

    1 release

  131. Affected

    1.65.0

    1 release

  132. Fixed

    1.65.1

    1 release

  133. Affected

    1.66.0 – 1.66.5

    6 releases

  134. Fixed

    1.66.6

    1 release

  135. Affected

    1.67.0 – 1.67.2

    3 releases

  136. Fixed

    1.67.3

    1 release

  137. Affected

    1.68.0 – 1.68.1

    2 releases

  138. Fixed

    1.68.2

    1 release

  139. Affected

    1.69.0

    1 release

  140. Fixed

    1.69.1

    1 release

  141. Affected

    1.70.0 – 1.70.3

    4 releases

  142. Fixed

    1.70.4

    1 release

  143. Affected

    1.71.0

    1 release

  144. Fixed

    1.71.1

    1 release

  145. Affected

    1.72.0

    1 release

  146. Fixed

    1.72.1

    1 release

  147. Affected

    1.73.0 – 1.73.4

    5 releases

  148. Fixed

    1.73.5

    1 release

  149. Affected

    1.74.0

    1 release

  150. Fixed

    1.74.1

    1 release

  151. Affected

    1.75.0

    1 release

  152. Fixed

    1.75.1

    1 release

  153. Affected

    1.76.0

    1 release

  154. Fixed

    1.76.1 – 1.78.8

    15 releases

  155. Affected

    1.79.0

    1 release

  156. Fixed

    1.79.1

    1 release

  157. Affected

    1.80.0

    1 release

  158. Fixed

    1.80.1

    1 release

  159. Affected

    1.81.0

    1 release

  160. Fixed

    1.81.1

    1 release

  161. Affected

    1.82.0

    1 release

  162. Fixed

    1.82.1

    1 release

  163. Affected

    1.83.0

    1 release

  164. Fixed

    1.83.1

    1 release

  165. Affected

    1.84.0

    1 release

  166. Fixed

    1.84.1

    1 release

  167. Affected

    1.85.0

    1 release

  168. Fixed

    1.85.1

    1 release

  169. Affected

    1.86.0

    1 release

  170. Fixed

    1.86.1

    1 release

  171. Affected

    1.87.0 – 1.87.6

    7 releases

  172. Fixed

    1.87.7

    1 release

  173. Affected

    1.88.0

    1 release

  174. Fixed

    1.88.1 – 1.90.2

    7 releases

  175. Affected

    1.91.0 – 1.91.2

    3 releases

  176. Fixed

    1.91.3 – 1.99.0

    34 releases

0.x

  1. Affected

    0.0.1 – 0.98.0

    347 releases

664 stable releases of @solana/web3.js, oldest to newest, one row per major.

Is your project affected?

Paste your package.json, or type the range you declare for @solana/web3.js. It is read in your browser and sent nowhere.

What happens

Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).

If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.