{"id":"CVE-2024-30253","aliases":["EUVD-2024-1160","GHSA-8m45-2rjm-j347"],"status":"published","title":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","description":"@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00593,"percentile":0.48669,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2024-04-17T15:07:27Z","modified":"2026-10-28T02:31:02Z","fixes":[{"ecosystem":"npm","package":"@solana/web3.js","fixed_in":["1.91.3","1.90.2","1.89.2","1.88.1","1.87.7","1.86.1","1.85.1","1.84.1","1.83.1","1.82.1","1.81.1","1.80.1","1.79.1","1.78.8","1.77.4","1.76.1","1.75.1","1.74.1","1.73.5","1.72.1","1.71.1","1.70.4","1.69.1","1.68.2","1.67.3","1.66.6","1.65.1","1.64.1","1.63.2","1.62.2","1.61.2","1.60.1","1.59.2","1.58.1","1.57.1","1.56.3","1.55.1","1.54.2","1.53.1","1.52.1","1.51.1","1.50.2","1.49.1","1.48.1","1.47.5","1.46.1","1.45.1","1.44.4","1.43.7","1.42.1","1.41.11","1.40.2","1.39.2","1.38.1","1.37.3","1.36.1","1.35.2","1.34.1","1.33.1","1.32.2","1.31.1","1.30.3","1.29.4","1.28.1","1.27.1","1.26.1","1.25.1","1.24.3","1.23.1","1.22.1","1.21.1","1.20.3","1.19.1","1.18.1","1.17.1","1.16.2","1.15.1","1.14.1","1.13.1","1.12.1","1.11.1","1.10.2","1.9.2","1.8.1","1.7.2","1.6.1","1.5.1","1.4.1","1.3.1","1.2.8","1.1.2","1.0.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.91.0"},{"fixed":"1.91.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.90"},{"fixed":"1.90.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.89"},{"fixed":"1.89.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.88.0"},{"last_affected":"1.88.0"},{"fixed":"1.88.1"}]}],"versions":["1.88.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.87.0"},{"fixed":"1.87.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.86.0"},{"last_affected":"1.86.0"},{"fixed":"1.86.1"}]}],"versions":["1.86.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"last_affected":"1.85.0"},{"fixed":"1.85.1"}]}],"versions":["1.85.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.84.0"},{"last_affected":"1.84.0"},{"fixed":"1.84.1"}]}],"versions":["1.84.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.83.0"},{"last_affected":"1.83.0"},{"fixed":"1.83.1"}]}],"versions":["1.83.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.82.0"},{"last_affected":"1.82.0"},{"fixed":"1.82.1"}]}],"versions":["1.82.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.81.0"},{"last_affected":"1.81.0"},{"fixed":"1.81.1"}]}],"versions":["1.81.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.80.0"},{"last_affected":"1.80.0"},{"fixed":"1.80.1"}]}],"versions":["1.80.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.79.0"},{"last_affected":"1.79.0"},{"fixed":"1.79.1"}]}],"versions":["1.79.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.78"},{"fixed":"1.78.8"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.77"},{"fixed":"1.77.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.76.0"},{"last_affected":"1.76.0"},{"fixed":"1.76.1"}]}],"versions":["1.76.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.75.0"},{"last_affected":"1.75.0"},{"fixed":"1.75.1"}]}],"versions":["1.75.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.74.0"},{"last_affected":"1.74.0"},{"fixed":"1.74.1"}]}],"versions":["1.74.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.73.0"},{"fixed":"1.73.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.72.0"},{"last_affected":"1.72.0"},{"fixed":"1.72.1"}]}],"versions":["1.72.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.71.0"},{"last_affected":"1.71.0"},{"fixed":"1.71.1"}]}],"versions":["1.71.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.70.0"},{"fixed":"1.70.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.69.0"},{"last_affected":"1.69.0"},{"fixed":"1.69.1"}]}],"versions":["1.69.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.68.0"},{"fixed":"1.68.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.67.0"},{"fixed":"1.67.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.66.0"},{"fixed":"1.66.6"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.65.0"},{"last_affected":"1.65.0"},{"fixed":"1.65.1"}]}],"versions":["1.65.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.64.0"},{"last_affected":"1.64.0"},{"fixed":"1.64.1"}]}],"versions":["1.64.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.63.0"},{"fixed":"1.63.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.62.0"},{"fixed":"1.62.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.61.0"},{"fixed":"1.61.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.60.0"},{"last_affected":"1.60.0"},{"fixed":"1.60.1"}]}],"versions":["1.60.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.59.0"},{"fixed":"1.59.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.58.0"},{"last_affected":"1.58.0"},{"fixed":"1.58.1"}]}],"versions":["1.58.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.57.0"},{"last_affected":"1.57.0"},{"fixed":"1.57.1"}]}],"versions":["1.57.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.56.0"},{"fixed":"1.56.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.55.0"},{"last_affected":"1.55.0"},{"fixed":"1.55.1"}]}],"versions":["1.55.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.54.0"},{"fixed":"1.54.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.53.0"},{"last_affected":"1.53.0"},{"fixed":"1.53.1"}]}],"versions":["1.53.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.52.0"},{"last_affected":"1.52.0"},{"fixed":"1.52.1"}]}],"versions":["1.52.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0"},{"last_affected":"1.51.0"},{"fixed":"1.51.1"}]}],"versions":["1.51.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.50.0"},{"fixed":"1.50.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.49.0"},{"last_affected":"1.49.0"},{"fixed":"1.49.1"}]}],"versions":["1.49.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.48.0"},{"last_affected":"1.48.0"},{"fixed":"1.48.1"}]}],"versions":["1.48.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.47.0"},{"fixed":"1.47.5"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.46.0"},{"last_affected":"1.46.0"},{"fixed":"1.46.1"}]}],"versions":["1.46.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.45.0"},{"last_affected":"1.45.0"},{"fixed":"1.45.1"}]}],"versions":["1.45.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.44.0"},{"fixed":"1.44.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.0"},{"fixed":"1.43.7"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.42.0"},{"last_affected":"1.42.0"},{"fixed":"1.42.1"}]}],"versions":["1.42.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.41.0"},{"fixed":"1.41.11"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.40.0"},{"fixed":"1.40.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.39.0"},{"fixed":"1.39.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.38.0"},{"last_affected":"1.38.0"},{"fixed":"1.38.1"}]}],"versions":["1.38.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.37.0"},{"fixed":"1.37.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.0"},{"last_affected":"1.36.0"},{"fixed":"1.36.1"}]}],"versions":["1.36.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0"},{"fixed":"1.35.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.34.0"},{"last_affected":"1.34.0"},{"fixed":"1.34.1"}]}],"versions":["1.34.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.33.0"},{"last_affected":"1.33.0"},{"fixed":"1.33.1"}]}],"versions":["1.33.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.32.0"},{"fixed":"1.32.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.31.0"},{"last_affected":"1.31.0"},{"fixed":"1.31.1"}]}],"versions":["1.31.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.30.0"},{"fixed":"1.30.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.29.0"},{"fixed":"1.29.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.28.0"},{"last_affected":"1.28.0"},{"fixed":"1.28.1"}]}],"versions":["1.28.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.0"},{"fixed":"1.27.1"}]}],"versions":["1.27.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.26.0"},{"last_affected":"1.26.0"},{"fixed":"1.26.1"}]}],"versions":["1.26.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.25.0"},{"last_affected":"1.25.0"},{"fixed":"1.25.1"}]}],"versions":["1.25.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.24.0"},{"fixed":"1.24.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.23.0"},{"last_affected":"1.23.0"},{"fixed":"1.23.1"}]}],"versions":["1.23.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.0"},{"last_affected":"1.22.0"},{"fixed":"1.22.1"}]}],"versions":["1.22.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.0"},{"last_affected":"1.21.0"},{"fixed":"1.21.1"}]}],"versions":["1.21.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.0"},{"fixed":"1.20.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"last_affected":"1.19.0"},{"fixed":"1.19.1"}]}],"versions":["1.19.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"last_affected":"1.18.0"},{"fixed":"1.18.1"}]}],"versions":["1.18.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.17.0"},{"last_affected":"1.17.0"},{"fixed":"1.17.1"}]}],"versions":["1.17.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.15.0"},{"last_affected":"1.15.0"},{"fixed":"1.15.1"}]}],"versions":["1.15.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"last_affected":"1.14.0"},{"fixed":"1.14.1"}]}],"versions":["1.14.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"fixed":"1.13.1"}]}],"versions":["1.13.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"fixed":"1.12.1"}]}],"versions":["1.12.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"fixed":"1.11.1"}]}],"versions":["1.11.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.10.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"fixed":"1.8.1"}]}],"versions":["1.8.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.0"},{"fixed":"1.7.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"fixed":"1.6.1"}]}],"versions":["1.6.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"fixed":"1.5.1"}]}],"versions":["1.5.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.0"},{"last_affected":"1.4.0"},{"fixed":"1.4.1"}]}],"versions":["1.4.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"last_affected":"1.3.0"},{"fixed":"1.3.1"}]}],"versions":["1.3.0"]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.8"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.91.0"},{"fixed":"1.91.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.90"},{"fixed":"1.90.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.89"},{"fixed":"1.89.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.88.0"},{"fixed":"1.88.1"}]}],"versions":["1.88.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.87.0"},{"fixed":"1.87.7"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.86.0"},{"fixed":"1.86.1"}]}],"versions":["1.86.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.85.0"},{"fixed":"1.85.1"}]}],"versions":["1.85.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.84.0"},{"fixed":"1.84.1"}]}],"versions":["1.84.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.83.0"},{"fixed":"1.83.1"}]}],"versions":["1.83.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.82.0"},{"fixed":"1.82.1"}]}],"versions":["1.82.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.81.0"},{"fixed":"1.81.1"}]}],"versions":["1.81.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.80.0"},{"fixed":"1.80.1"}]}],"versions":["1.80.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.79.0"},{"fixed":"1.79.1"}]}],"versions":["1.79.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.78"},{"fixed":"1.78.8"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.77"},{"fixed":"1.77.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.76.0"},{"fixed":"1.76.1"}]}],"versions":["1.76.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.75.0"},{"fixed":"1.75.1"}]}],"versions":["1.75.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.74.0"},{"fixed":"1.74.1"}]}],"versions":["1.74.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.73.0"},{"fixed":"1.73.5"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.72.0"},{"fixed":"1.72.1"}]}],"versions":["1.72.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.71.0"},{"fixed":"1.71.1"}]}],"versions":["1.71.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.70.0"},{"fixed":"1.70.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.69.0"},{"fixed":"1.69.1"}]}],"versions":["1.69.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.68.0"},{"fixed":"1.68.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.67.0"},{"fixed":"1.67.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.66.0"},{"fixed":"1.66.6"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.65.0"},{"fixed":"1.65.1"}]}],"versions":["1.65.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.64.0"},{"fixed":"1.64.1"}]}],"versions":["1.64.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.63.0"},{"fixed":"1.63.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.62.0"},{"fixed":"1.62.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.61.0"},{"fixed":"1.61.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.60.0"},{"fixed":"1.60.1"}]}],"versions":["1.60.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.59.0"},{"fixed":"1.59.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.58.0"},{"fixed":"1.58.1"}]}],"versions":["1.58.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.57.0"},{"fixed":"1.57.1"}]}],"versions":["1.57.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.56.0"},{"fixed":"1.56.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.55.0"},{"fixed":"1.55.1"}]}],"versions":["1.55.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.54.0"},{"fixed":"1.54.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.53.0"},{"fixed":"1.53.1"}]}],"versions":["1.53.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.52.0"},{"fixed":"1.52.1"}]}],"versions":["1.52.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.51.0"},{"fixed":"1.51.1"}]}],"versions":["1.51.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.50.0"},{"fixed":"1.50.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.49.0"},{"fixed":"1.49.1"}]}],"versions":["1.49.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.48.0"},{"fixed":"1.48.1"}]}],"versions":["1.48.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.47.0"},{"fixed":"1.47.5"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.46.0"},{"fixed":"1.46.1"}]}],"versions":["1.46.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.45.0"},{"fixed":"1.45.1"}]}],"versions":["1.45.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.44.0"},{"fixed":"1.44.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.43.0"},{"fixed":"1.43.7"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.42.0"},{"fixed":"1.42.1"}]}],"versions":["1.42.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.41.0"},{"fixed":"1.41.11"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.40.0"},{"fixed":"1.40.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.39.0"},{"fixed":"1.39.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.38.0"},{"fixed":"1.38.1"}]}],"versions":["1.38.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.37.0"},{"fixed":"1.37.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.36.0"},{"fixed":"1.36.1"}]}],"versions":["1.36.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.35.0"},{"fixed":"1.35.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.34.0"},{"fixed":"1.34.1"}]}],"versions":["1.34.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.33.0"},{"fixed":"1.33.1"}]}],"versions":["1.33.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.32.0"},{"fixed":"1.32.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.31.0"},{"fixed":"1.31.1"}]}],"versions":["1.31.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.30.0"},{"fixed":"1.30.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.29.0"},{"fixed":"1.29.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.28.0"},{"fixed":"1.28.1"}]}],"versions":["1.28.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.27.0"},{"fixed":"1.27.1"}]}],"versions":["1.27.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.26.0"},{"fixed":"1.26.1"}]}],"versions":["1.26.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.25.0"},{"fixed":"1.25.1"}]}],"versions":["1.25.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.24.0"},{"fixed":"1.24.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.23.0"},{"fixed":"1.23.1"}]}],"versions":["1.23.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.22.0"},{"fixed":"1.22.1"}]}],"versions":["1.22.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.21.0"},{"fixed":"1.21.1"}]}],"versions":["1.21.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.20.0"},{"fixed":"1.20.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.19.0"},{"fixed":"1.19.1"}]}],"versions":["1.19.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.1"}]}],"versions":["1.18.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.17.0"},{"fixed":"1.17.1"}]}],"versions":["1.17.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.16.0"},{"fixed":"1.16.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.15.0"},{"fixed":"1.15.1"}]}],"versions":["1.15.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.14.0"},{"fixed":"1.14.1"}]}],"versions":["1.14.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.13.0"},{"fixed":"1.13.1"}]}],"versions":["1.13.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.12.0"},{"fixed":"1.12.1"}]}],"versions":["1.12.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.11.0"},{"fixed":"1.11.1"}]}],"versions":["1.11.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.10.0"},{"fixed":"1.10.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.9.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.1"}]}],"versions":["1.8.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.7.0"},{"fixed":"1.7.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.6.0"},{"fixed":"1.6.1"}]}],"versions":["1.6.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.1"}]}],"versions":["1.5.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.0"},{"fixed":"1.4.1"}]}],"versions":["1.4.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.3.0"},{"fixed":"1.3.1"}]}],"versions":["1.3.0"]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.2.0"},{"fixed":"1.2.8"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.1.0"},{"fixed":"1.1.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@solana/web3.js","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.1"}]}]}],"products":[{"vendor":"solana-labs","product":"solana-web3.js"},{"vendor":"solanalabs","product":"web3"}],"references":[{"url":"https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347","tags":["x_refsource_CONFIRM","x_transferred","advisory","web"]},{"url":"https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0","tags":["x_refsource_MISC","x_transferred","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30253","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8m45-2rjm-j347"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30253.json","tags":["advisory"]},{"url":"https://github.com/solana-labs/solana-web3.js","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-30253","title":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","description":"@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.","status":"published","published":"2024-04-17T15:07:27.546Z","modified":"2024-08-21T15:05:27.101Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:34:07.831255Z"}],"euvd":[{"id":"EUVD-2024-1160","description":"@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.","status":"published","published":"2024-04-17T15:07:27Z","modified":"2024-08-21T15:05:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:14.188111Z"}],"ghsa":[{"id":"GHSA-8m45-2rjm-j347","title":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","description":"Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).\n\nIf you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.","status":"published","published":"2024-04-17T18:21:18Z","modified":"2024-04-17T21:29:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:37:43.62603Z"}],"nvd":[{"id":"CVE-2024-30253","description":"@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.","status":"published","published":"2024-04-17T15:15:07.253Z","modified":"2026-06-17T07:26:36.63Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:09:52.184911Z"}],"osv":[{"id":"CVE-2024-30253","title":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","description":"@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability. This vulnerability is fixed in 1.0.1, 1.10.2, 1.11.1, 1.12.1, 1.1.2, 1.13.1, 1.14.1, 1.15.1, 1.16.2, 1.17.1, 1.18.1, 1.19.1, 1.20.3, 1.21.1, 1.22.1, 1.23.1, 1.24.3, 1.25.1, 1.26.1, 1.27.1, 1.28.1, 1.2.8, 1.29.4, 1.30.3, 1.31.1, 1.3.1, 1.32.3, 1.33.1, 1.34.1, 1.35.2, 1.36.1, 1.37.3, 1.38.1, 1.39.2, 1.40.2, 1.41.11, 1.4.1, 1.42.1, 1.43.7, 1.44.4, 1.45.1, 1.46.1, 1.47.5, 1.48.1, 1.49.1, 1.50.2, 1.51.1, 1.5.1, 1.52.1, 1.53.1, 1.54.2, 1.55.1, 1.56.3, 1.57.1, 1.58.1, 1.59.2, 1.60.1, 1.61.2, 1.6.1, 1.62.2, 1.63.2, 1.64.1, 1.65.1, 1.66.6, 1.67.3, 1.68.2, 1.69.1, 1.70.4, 1.71.1, 1.72.1, 1.7.2, 1.73.5, 1.74.1, 1.75.1, 1.76.1, 1.77.4, 1.78.8, 1.79.1, 1.80.1, 1.81.1, 1.8.1, 1.82.1, 1.83.1, 1.84.1, 1.85.1, 1.86.1, 1.87.7, 1.88.1, 1.89.2, 1.90.2, 1.9.2, and 1.91.3.","status":"published","published":"2024-04-17T15:07:27.546Z","modified":"2026-10-28T02:31:02.203674778Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:44:40.06138Z"},{"id":"GHSA-8m45-2rjm-j347","title":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","description":"Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).\n\nIf you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.","status":"published","published":"2024-04-17T18:21:18Z","modified":"2026-09-10T03:50:12.72244621Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:42.437513Z"}]}}