GHSA-8m45-2rjm-j347

Source

https://github.com/advisories/GHSA-8m45-2rjm-j347

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json

Aliases

CVE-2024-30253

Published

2024-04-17T18:21:18Z

Modified

2024-04-17T21:29:10Z

Details

Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).

If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.

References

Affected packages

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.91.0

Fixed

1.91.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.90

Fixed

1.90.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.89

Fixed

1.89.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.88.0

Fixed

1.88.1

Affected versions

1.*

1.88.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.87.0

Fixed

1.87.7

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.86.0

Fixed

1.86.1

Affected versions

1.*

1.86.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.85.0

Fixed

1.85.1

Affected versions

1.*

1.85.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.84.0

Fixed

1.84.1

Affected versions

1.*

1.84.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.83.0

Fixed

1.83.1

Affected versions

1.*

1.83.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.82.0

Fixed

1.82.1

Affected versions

1.*

1.82.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.81.0

Fixed

1.81.1

Affected versions

1.*

1.81.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.80.0

Fixed

1.80.1

Affected versions

1.*

1.80.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.79.0

Fixed

1.79.1

Affected versions

1.*

1.79.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.78

Fixed

1.78.8

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.77

Fixed

1.77.4

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.76.0

Fixed

1.76.1

Affected versions

1.*

1.76.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.75.0

Fixed

1.75.1

Affected versions

1.*

1.75.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.74.0

Fixed

1.74.1

Affected versions

1.*

1.74.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.73.0

Fixed

1.73.5

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.72.0

Fixed

1.72.1

Affected versions

1.*

1.72.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.71.0

Fixed

1.71.1

Affected versions

1.*

1.71.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.70.0

Fixed

1.70.4

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.69.0

Fixed

1.69.1

Affected versions

1.*

1.69.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.68.0

Fixed

1.68.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.67.0

Fixed

1.67.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.66.0

Fixed

1.66.6

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.65.0

Fixed

1.65.1

Affected versions

1.*

1.65.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.64.0

Fixed

1.64.1

Affected versions

1.*

1.64.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.63.0

Fixed

1.63.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.62.0

Fixed

1.62.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.61.0

Fixed

1.61.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.60.0

Fixed

1.60.1

Affected versions

1.*

1.60.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.59.0

Fixed

1.59.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.58.0

Fixed

1.58.1

Affected versions

1.*

1.58.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.57.0

Fixed

1.57.1

Affected versions

1.*

1.57.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.56.0

Fixed

1.56.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.55.0

Fixed

1.55.1

Affected versions

1.*

1.55.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.54.0

Fixed

1.54.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.53.0

Fixed

1.53.1

Affected versions

1.*

1.53.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.52.0

Fixed

1.52.1

Affected versions

1.*

1.52.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.51.0

Fixed

1.51.1

Affected versions

1.*

1.51.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.50.0

Fixed

1.50.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.49.0

Fixed

1.49.1

Affected versions

1.*

1.49.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.48.0

Fixed

1.48.1

Affected versions

1.*

1.48.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.47.0

Fixed

1.47.5

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.46.0

Fixed

1.46.1

Affected versions

1.*

1.46.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.45.0

Fixed

1.45.1

Affected versions

1.*

1.45.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.44.0

Fixed

1.44.4

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.43.0

Fixed

1.43.7

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.42.0

Fixed

1.42.1

Affected versions

1.*

1.42.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.41.0

Fixed

1.41.11

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.40.0

Fixed

1.40.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.39.0

Fixed

1.39.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.38.0

Fixed

1.38.1

Affected versions

1.*

1.38.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.37.0

Fixed

1.37.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.36.0

Fixed

1.36.1

Affected versions

1.*

1.36.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.35.0

Fixed

1.35.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.34.0

Fixed

1.34.1

Affected versions

1.*

1.34.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.33.0

Fixed

1.33.1

Affected versions

1.*

1.33.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.32.0

Fixed

1.32.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.31.0

Fixed

1.31.1

Affected versions

1.*

1.31.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.30.0

Fixed

1.30.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.29.0

Fixed

1.29.4

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.28.0

Fixed

1.28.1

Affected versions

1.*

1.28.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.27.0

Fixed

1.27.1

Affected versions

1.*

1.27.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.26.0

Fixed

1.26.1

Affected versions

1.*

1.26.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.25.0

Fixed

1.25.1

Affected versions

1.*

1.25.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.24.0

Fixed

1.24.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.23.0

Fixed

1.23.1

Affected versions

1.*

1.23.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.22.0

Fixed

1.22.1

Affected versions

1.*

1.22.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.21.0

Fixed

1.21.1

Affected versions

1.*

1.21.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.20.0

Fixed

1.20.3

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.19.0

Fixed

1.19.1

Affected versions

1.*

1.19.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.18.0

Fixed

1.18.1

Affected versions

1.*

1.18.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.17.0

Fixed

1.17.1

Affected versions

1.*

1.17.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.16.0

Fixed

1.16.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.15.0

Fixed

1.15.1

Affected versions

1.*

1.15.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.14.0

Fixed

1.14.1

Affected versions

1.*

1.14.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.13.0

Fixed

1.13.1

Affected versions

1.*

1.13.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.12.0

Fixed

1.12.1

Affected versions

1.*

1.12.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.11.0

Fixed

1.11.1

Affected versions

1.*

1.11.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.10.0

Fixed

1.10.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.9.0

Fixed

1.9.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.8.0

Fixed

1.8.1

Affected versions

1.*

1.8.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.7.0

Fixed

1.7.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.6.0

Fixed

1.6.1

Affected versions

1.*

1.6.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.5.0

Fixed

1.5.1

Affected versions

1.*

1.5.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.4.0

Fixed

1.4.1

Affected versions

1.*

1.4.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.3.0

Fixed

1.3.1

Affected versions

1.*

1.3.0

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.2.0

Fixed

1.2.8

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

1.1.0

Fixed

1.1.2

npm / @solana/web3.js

Package

Name: @solana/web3.js

Affected ranges

Type: SEMVER
Events: Introduced

0The exact introduced commit is unknown

Fixed

1.0.1