CVE-2024-30253: @solana/web3.js Denial of Service Vulnerability

{
  "schema_version" : "1.4.0",
  "id" : "GHSA-8m45-2rjm-j347",
  "modified" : "2024-04-17T21:29:10Z",
  "published" : "2024-04-17T18:21:18Z",
  "aliases" : [ "CVE-2024-30253" ],
  "summary" : "Handling untrusted input can result in a crash, leading to loss of availability / denial of service",
  "details" : "Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).\n\nIf you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.91.0"
      }, {
        "fixed" : "1.91.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.90"
      }, {
        "fixed" : "1.90.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.89"
      }, {
        "fixed" : "1.89.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.88.0"
      }, {
        "fixed" : "1.88.1"
      } ]
    } ],
    "versions" : [ "1.88.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.87.0"
      }, {
        "fixed" : "1.87.7"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.86.0"
      }, {
        "fixed" : "1.86.1"
      } ]
    } ],
    "versions" : [ "1.86.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.85.0"
      }, {
        "fixed" : "1.85.1"
      } ]
    } ],
    "versions" : [ "1.85.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.84.0"
      }, {
        "fixed" : "1.84.1"
      } ]
    } ],
    "versions" : [ "1.84.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.83.0"
      }, {
        "fixed" : "1.83.1"
      } ]
    } ],
    "versions" : [ "1.83.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.82.0"
      }, {
        "fixed" : "1.82.1"
      } ]
    } ],
    "versions" : [ "1.82.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.81.0"
      }, {
        "fixed" : "1.81.1"
      } ]
    } ],
    "versions" : [ "1.81.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.80.0"
      }, {
        "fixed" : "1.80.1"
      } ]
    } ],
    "versions" : [ "1.80.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.79.0"
      }, {
        "fixed" : "1.79.1"
      } ]
    } ],
    "versions" : [ "1.79.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.78"
      }, {
        "fixed" : "1.78.8"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.77"
      }, {
        "fixed" : "1.77.4"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.76.0"
      }, {
        "fixed" : "1.76.1"
      } ]
    } ],
    "versions" : [ "1.76.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.75.0"
      }, {
        "fixed" : "1.75.1"
      } ]
    } ],
    "versions" : [ "1.75.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.74.0"
      }, {
        "fixed" : "1.74.1"
      } ]
    } ],
    "versions" : [ "1.74.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.73.0"
      }, {
        "fixed" : "1.73.5"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.72.0"
      }, {
        "fixed" : "1.72.1"
      } ]
    } ],
    "versions" : [ "1.72.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.71.0"
      }, {
        "fixed" : "1.71.1"
      } ]
    } ],
    "versions" : [ "1.71.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.70.0"
      }, {
        "fixed" : "1.70.4"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.69.0"
      }, {
        "fixed" : "1.69.1"
      } ]
    } ],
    "versions" : [ "1.69.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.68.0"
      }, {
        "fixed" : "1.68.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.67.0"
      }, {
        "fixed" : "1.67.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.66.0"
      }, {
        "fixed" : "1.66.6"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.65.0"
      }, {
        "fixed" : "1.65.1"
      } ]
    } ],
    "versions" : [ "1.65.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.64.0"
      }, {
        "fixed" : "1.64.1"
      } ]
    } ],
    "versions" : [ "1.64.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.63.0"
      }, {
        "fixed" : "1.63.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.62.0"
      }, {
        "fixed" : "1.62.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.61.0"
      }, {
        "fixed" : "1.61.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.60.0"
      }, {
        "fixed" : "1.60.1"
      } ]
    } ],
    "versions" : [ "1.60.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.59.0"
      }, {
        "fixed" : "1.59.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.58.0"
      }, {
        "fixed" : "1.58.1"
      } ]
    } ],
    "versions" : [ "1.58.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.57.0"
      }, {
        "fixed" : "1.57.1"
      } ]
    } ],
    "versions" : [ "1.57.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.56.0"
      }, {
        "fixed" : "1.56.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.55.0"
      }, {
        "fixed" : "1.55.1"
      } ]
    } ],
    "versions" : [ "1.55.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.54.0"
      }, {
        "fixed" : "1.54.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.53.0"
      }, {
        "fixed" : "1.53.1"
      } ]
    } ],
    "versions" : [ "1.53.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.52.0"
      }, {
        "fixed" : "1.52.1"
      } ]
    } ],
    "versions" : [ "1.52.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.51.0"
      }, {
        "fixed" : "1.51.1"
      } ]
    } ],
    "versions" : [ "1.51.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.50.0"
      }, {
        "fixed" : "1.50.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.49.0"
      }, {
        "fixed" : "1.49.1"
      } ]
    } ],
    "versions" : [ "1.49.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.48.0"
      }, {
        "fixed" : "1.48.1"
      } ]
    } ],
    "versions" : [ "1.48.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.47.0"
      }, {
        "fixed" : "1.47.5"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.46.0"
      }, {
        "fixed" : "1.46.1"
      } ]
    } ],
    "versions" : [ "1.46.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.45.0"
      }, {
        "fixed" : "1.45.1"
      } ]
    } ],
    "versions" : [ "1.45.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.44.0"
      }, {
        "fixed" : "1.44.4"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.43.0"
      }, {
        "fixed" : "1.43.7"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.42.0"
      }, {
        "fixed" : "1.42.1"
      } ]
    } ],
    "versions" : [ "1.42.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.41.0"
      }, {
        "fixed" : "1.41.11"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.40.0"
      }, {
        "fixed" : "1.40.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.39.0"
      }, {
        "fixed" : "1.39.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.38.0"
      }, {
        "fixed" : "1.38.1"
      } ]
    } ],
    "versions" : [ "1.38.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.37.0"
      }, {
        "fixed" : "1.37.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.36.0"
      }, {
        "fixed" : "1.36.1"
      } ]
    } ],
    "versions" : [ "1.36.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.35.0"
      }, {
        "fixed" : "1.35.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.34.0"
      }, {
        "fixed" : "1.34.1"
      } ]
    } ],
    "versions" : [ "1.34.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.33.0"
      }, {
        "fixed" : "1.33.1"
      } ]
    } ],
    "versions" : [ "1.33.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.32.0"
      }, {
        "fixed" : "1.32.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.31.0"
      }, {
        "fixed" : "1.31.1"
      } ]
    } ],
    "versions" : [ "1.31.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.30.0"
      }, {
        "fixed" : "1.30.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.29.0"
      }, {
        "fixed" : "1.29.4"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.28.0"
      }, {
        "fixed" : "1.28.1"
      } ]
    } ],
    "versions" : [ "1.28.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.27.0"
      }, {
        "fixed" : "1.27.1"
      } ]
    } ],
    "versions" : [ "1.27.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.26.0"
      }, {
        "fixed" : "1.26.1"
      } ]
    } ],
    "versions" : [ "1.26.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.25.0"
      }, {
        "fixed" : "1.25.1"
      } ]
    } ],
    "versions" : [ "1.25.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.24.0"
      }, {
        "fixed" : "1.24.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.23.0"
      }, {
        "fixed" : "1.23.1"
      } ]
    } ],
    "versions" : [ "1.23.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.22.0"
      }, {
        "fixed" : "1.22.1"
      } ]
    } ],
    "versions" : [ "1.22.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.21.0"
      }, {
        "fixed" : "1.21.1"
      } ]
    } ],
    "versions" : [ "1.21.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.20.0"
      }, {
        "fixed" : "1.20.3"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.19.0"
      }, {
        "fixed" : "1.19.1"
      } ]
    } ],
    "versions" : [ "1.19.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.18.0"
      }, {
        "fixed" : "1.18.1"
      } ]
    } ],
    "versions" : [ "1.18.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.17.0"
      }, {
        "fixed" : "1.17.1"
      } ]
    } ],
    "versions" : [ "1.17.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.16.0"
      }, {
        "fixed" : "1.16.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.15.0"
      }, {
        "fixed" : "1.15.1"
      } ]
    } ],
    "versions" : [ "1.15.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.14.0"
      }, {
        "fixed" : "1.14.1"
      } ]
    } ],
    "versions" : [ "1.14.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.13.0"
      }, {
        "fixed" : "1.13.1"
      } ]
    } ],
    "versions" : [ "1.13.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.12.0"
      }, {
        "fixed" : "1.12.1"
      } ]
    } ],
    "versions" : [ "1.12.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.11.0"
      }, {
        "fixed" : "1.11.1"
      } ]
    } ],
    "versions" : [ "1.11.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.10.0"
      }, {
        "fixed" : "1.10.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.9.0"
      }, {
        "fixed" : "1.9.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.8.0"
      }, {
        "fixed" : "1.8.1"
      } ]
    } ],
    "versions" : [ "1.8.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.7.0"
      }, {
        "fixed" : "1.7.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.6.0"
      }, {
        "fixed" : "1.6.1"
      } ]
    } ],
    "versions" : [ "1.6.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.5.0"
      }, {
        "fixed" : "1.5.1"
      } ]
    } ],
    "versions" : [ "1.5.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.4.0"
      }, {
        "fixed" : "1.4.1"
      } ]
    } ],
    "versions" : [ "1.4.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.3.0"
      }, {
        "fixed" : "1.3.1"
      } ]
    } ],
    "versions" : [ "1.3.0" ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.2.0"
      }, {
        "fixed" : "1.2.8"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "1.1.0"
      }, {
        "fixed" : "1.1.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "npm",
      "name" : "@solana/web3.js"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "1.0.1"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347"
  }, {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2024-30253"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/solana-labs/solana-web3.js"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-119" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2024-04-17T18:21:18Z",
    "nvd_published_at" : "2024-04-17T15:15:07Z"
  }
}