Skip to content

Solana-labs Solana-web3.js vulnerabilities

solana-labs solana-web3.js@solana/web3.js modified package published to npm, containing malware that exfiltrates private key materialCVE-2024-54134Fix available8.3 HighDecember 4, 2024
solanalabs web3, solana-labs solana-web3.js +1 moreHandling untrusted input can result in a crash, leading to loss of availability / denial of serviceCVE-2024-30253Fix available7.5 HighApril 17, 2024