VDB
Sign up
HIGH7.5

GHSA-8m45-2rjm-j347

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

Quick fix

GHSA-8m45-2rjm-j347 — @solana/web3.js: upgrade to the fixed version with the command below.

npm install @solana/web3.js@1.91.3

Details

Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).

If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/@solana/web3.js
Introduced in: 1.91.0Fixed in: 1.91.3
Fixnpm install @solana/web3.js@1.91.3
npm/@solana/web3.js
Introduced in: 1.90Fixed in: 1.90.2
Fixnpm install @solana/web3.js@1.90.2
npm/@solana/web3.js
Introduced in: 1.89Fixed in: 1.89.2
Fixnpm install @solana/web3.js@1.89.2
npm/@solana/web3.js
Introduced in: 1.88.0Fixed in: 1.88.1
Fixnpm install @solana/web3.js@1.88.1
npm/@solana/web3.js
Introduced in: 1.87.0Fixed in: 1.87.7
Fixnpm install @solana/web3.js@1.87.7
npm/@solana/web3.js
Introduced in: 1.86.0Fixed in: 1.86.1
Fixnpm install @solana/web3.js@1.86.1
npm/@solana/web3.js
Introduced in: 1.85.0Fixed in: 1.85.1
Fixnpm install @solana/web3.js@1.85.1
npm/@solana/web3.js
Introduced in: 1.84.0Fixed in: 1.84.1
Fixnpm install @solana/web3.js@1.84.1
npm/@solana/web3.js
Introduced in: 1.83.0Fixed in: 1.83.1
Fixnpm install @solana/web3.js@1.83.1
npm/@solana/web3.js
Introduced in: 1.82.0Fixed in: 1.82.1
Fixnpm install @solana/web3.js@1.82.1
npm/@solana/web3.js
Introduced in: 1.81.0Fixed in: 1.81.1
Fixnpm install @solana/web3.js@1.81.1
npm/@solana/web3.js
Introduced in: 1.80.0Fixed in: 1.80.1
Fixnpm install @solana/web3.js@1.80.1
npm/@solana/web3.js
Introduced in: 1.79.0Fixed in: 1.79.1
Fixnpm install @solana/web3.js@1.79.1
npm/@solana/web3.js
Introduced in: 1.78Fixed in: 1.78.8
Fixnpm install @solana/web3.js@1.78.8
npm/@solana/web3.js
Introduced in: 1.77Fixed in: 1.77.4
Fixnpm install @solana/web3.js@1.77.4
npm/@solana/web3.js
Introduced in: 1.76.0Fixed in: 1.76.1
Fixnpm install @solana/web3.js@1.76.1
npm/@solana/web3.js
Introduced in: 1.75.0Fixed in: 1.75.1
Fixnpm install @solana/web3.js@1.75.1
npm/@solana/web3.js
Introduced in: 1.74.0Fixed in: 1.74.1
Fixnpm install @solana/web3.js@1.74.1
npm/@solana/web3.js
Introduced in: 1.73.0Fixed in: 1.73.5
Fixnpm install @solana/web3.js@1.73.5
npm/@solana/web3.js
Introduced in: 1.72.0Fixed in: 1.72.1
Fixnpm install @solana/web3.js@1.72.1
npm/@solana/web3.js
Introduced in: 1.71.0Fixed in: 1.71.1
Fixnpm install @solana/web3.js@1.71.1
npm/@solana/web3.js
Introduced in: 1.70.0Fixed in: 1.70.4
Fixnpm install @solana/web3.js@1.70.4
npm/@solana/web3.js
Introduced in: 1.69.0Fixed in: 1.69.1
Fixnpm install @solana/web3.js@1.69.1
npm/@solana/web3.js
Introduced in: 1.68.0Fixed in: 1.68.2
Fixnpm install @solana/web3.js@1.68.2
npm/@solana/web3.js
Introduced in: 1.67.0Fixed in: 1.67.3
Fixnpm install @solana/web3.js@1.67.3
npm/@solana/web3.js
Introduced in: 1.66.0Fixed in: 1.66.6
Fixnpm install @solana/web3.js@1.66.6
npm/@solana/web3.js
Introduced in: 1.65.0Fixed in: 1.65.1
Fixnpm install @solana/web3.js@1.65.1
npm/@solana/web3.js
Introduced in: 1.64.0Fixed in: 1.64.1
Fixnpm install @solana/web3.js@1.64.1
npm/@solana/web3.js
Introduced in: 1.63.0Fixed in: 1.63.2
Fixnpm install @solana/web3.js@1.63.2
npm/@solana/web3.js
Introduced in: 1.62.0Fixed in: 1.62.2
Fixnpm install @solana/web3.js@1.62.2
npm/@solana/web3.js
Introduced in: 1.61.0Fixed in: 1.61.2
Fixnpm install @solana/web3.js@1.61.2
npm/@solana/web3.js
Introduced in: 1.60.0Fixed in: 1.60.1
Fixnpm install @solana/web3.js@1.60.1
npm/@solana/web3.js
Introduced in: 1.59.0Fixed in: 1.59.2
Fixnpm install @solana/web3.js@1.59.2
npm/@solana/web3.js
Introduced in: 1.58.0Fixed in: 1.58.1
Fixnpm install @solana/web3.js@1.58.1
npm/@solana/web3.js
Introduced in: 1.57.0Fixed in: 1.57.1
Fixnpm install @solana/web3.js@1.57.1
npm/@solana/web3.js
Introduced in: 1.56.0Fixed in: 1.56.3
Fixnpm install @solana/web3.js@1.56.3
npm/@solana/web3.js
Introduced in: 1.55.0Fixed in: 1.55.1
Fixnpm install @solana/web3.js@1.55.1
npm/@solana/web3.js
Introduced in: 1.54.0Fixed in: 1.54.2
Fixnpm install @solana/web3.js@1.54.2
npm/@solana/web3.js
Introduced in: 1.53.0Fixed in: 1.53.1
Fixnpm install @solana/web3.js@1.53.1
npm/@solana/web3.js
Introduced in: 1.52.0Fixed in: 1.52.1
Fixnpm install @solana/web3.js@1.52.1
npm/@solana/web3.js
Introduced in: 1.51.0Fixed in: 1.51.1
Fixnpm install @solana/web3.js@1.51.1
npm/@solana/web3.js
Introduced in: 1.50.0Fixed in: 1.50.2
Fixnpm install @solana/web3.js@1.50.2
npm/@solana/web3.js
Introduced in: 1.49.0Fixed in: 1.49.1
Fixnpm install @solana/web3.js@1.49.1
npm/@solana/web3.js
Introduced in: 1.48.0Fixed in: 1.48.1
Fixnpm install @solana/web3.js@1.48.1
npm/@solana/web3.js
Introduced in: 1.47.0Fixed in: 1.47.5
Fixnpm install @solana/web3.js@1.47.5
npm/@solana/web3.js
Introduced in: 1.46.0Fixed in: 1.46.1
Fixnpm install @solana/web3.js@1.46.1
npm/@solana/web3.js
Introduced in: 1.45.0Fixed in: 1.45.1
Fixnpm install @solana/web3.js@1.45.1
npm/@solana/web3.js
Introduced in: 1.44.0Fixed in: 1.44.4
Fixnpm install @solana/web3.js@1.44.4
npm/@solana/web3.js
Introduced in: 1.43.0Fixed in: 1.43.7
Fixnpm install @solana/web3.js@1.43.7
npm/@solana/web3.js
Introduced in: 1.42.0Fixed in: 1.42.1
Fixnpm install @solana/web3.js@1.42.1
npm/@solana/web3.js
Introduced in: 1.41.0Fixed in: 1.41.11
Fixnpm install @solana/web3.js@1.41.11
npm/@solana/web3.js
Introduced in: 1.40.0Fixed in: 1.40.2
Fixnpm install @solana/web3.js@1.40.2
npm/@solana/web3.js
Introduced in: 1.39.0Fixed in: 1.39.2
Fixnpm install @solana/web3.js@1.39.2
npm/@solana/web3.js
Introduced in: 1.38.0Fixed in: 1.38.1
Fixnpm install @solana/web3.js@1.38.1
npm/@solana/web3.js
Introduced in: 1.37.0Fixed in: 1.37.3
Fixnpm install @solana/web3.js@1.37.3
npm/@solana/web3.js
Introduced in: 1.36.0Fixed in: 1.36.1
Fixnpm install @solana/web3.js@1.36.1
npm/@solana/web3.js
Introduced in: 1.35.0Fixed in: 1.35.2
Fixnpm install @solana/web3.js@1.35.2
npm/@solana/web3.js
Introduced in: 1.34.0Fixed in: 1.34.1
Fixnpm install @solana/web3.js@1.34.1
npm/@solana/web3.js
Introduced in: 1.33.0Fixed in: 1.33.1
Fixnpm install @solana/web3.js@1.33.1
npm/@solana/web3.js
Introduced in: 1.32.0Fixed in: 1.32.2
Fixnpm install @solana/web3.js@1.32.2
npm/@solana/web3.js
Introduced in: 1.31.0Fixed in: 1.31.1
Fixnpm install @solana/web3.js@1.31.1
npm/@solana/web3.js
Introduced in: 1.30.0Fixed in: 1.30.3
Fixnpm install @solana/web3.js@1.30.3
npm/@solana/web3.js
Introduced in: 1.29.0Fixed in: 1.29.4
Fixnpm install @solana/web3.js@1.29.4
npm/@solana/web3.js
Introduced in: 1.28.0Fixed in: 1.28.1
Fixnpm install @solana/web3.js@1.28.1
npm/@solana/web3.js
Introduced in: 1.27.0Fixed in: 1.27.1
Fixnpm install @solana/web3.js@1.27.1
npm/@solana/web3.js
Introduced in: 1.26.0Fixed in: 1.26.1
Fixnpm install @solana/web3.js@1.26.1
npm/@solana/web3.js
Introduced in: 1.25.0Fixed in: 1.25.1
Fixnpm install @solana/web3.js@1.25.1
npm/@solana/web3.js
Introduced in: 1.24.0Fixed in: 1.24.3
Fixnpm install @solana/web3.js@1.24.3
npm/@solana/web3.js
Introduced in: 1.23.0Fixed in: 1.23.1
Fixnpm install @solana/web3.js@1.23.1
npm/@solana/web3.js
Introduced in: 1.22.0Fixed in: 1.22.1
Fixnpm install @solana/web3.js@1.22.1
npm/@solana/web3.js
Introduced in: 1.21.0Fixed in: 1.21.1
Fixnpm install @solana/web3.js@1.21.1
npm/@solana/web3.js
Introduced in: 1.20.0Fixed in: 1.20.3
Fixnpm install @solana/web3.js@1.20.3
npm/@solana/web3.js
Introduced in: 1.19.0Fixed in: 1.19.1
Fixnpm install @solana/web3.js@1.19.1
npm/@solana/web3.js
Introduced in: 1.18.0Fixed in: 1.18.1
Fixnpm install @solana/web3.js@1.18.1
npm/@solana/web3.js
Introduced in: 1.17.0Fixed in: 1.17.1
Fixnpm install @solana/web3.js@1.17.1
npm/@solana/web3.js
Introduced in: 1.16.0Fixed in: 1.16.2
Fixnpm install @solana/web3.js@1.16.2
npm/@solana/web3.js
Introduced in: 1.15.0Fixed in: 1.15.1
Fixnpm install @solana/web3.js@1.15.1
npm/@solana/web3.js
Introduced in: 1.14.0Fixed in: 1.14.1
Fixnpm install @solana/web3.js@1.14.1
npm/@solana/web3.js
Introduced in: 1.13.0Fixed in: 1.13.1
Fixnpm install @solana/web3.js@1.13.1
npm/@solana/web3.js
Introduced in: 1.12.0Fixed in: 1.12.1
Fixnpm install @solana/web3.js@1.12.1
npm/@solana/web3.js
Introduced in: 1.11.0Fixed in: 1.11.1
Fixnpm install @solana/web3.js@1.11.1
npm/@solana/web3.js
Introduced in: 1.10.0Fixed in: 1.10.2
Fixnpm install @solana/web3.js@1.10.2
npm/@solana/web3.js
Introduced in: 1.9.0Fixed in: 1.9.2
Fixnpm install @solana/web3.js@1.9.2
npm/@solana/web3.js
Introduced in: 1.8.0Fixed in: 1.8.1
Fixnpm install @solana/web3.js@1.8.1
npm/@solana/web3.js
Introduced in: 1.7.0Fixed in: 1.7.2
Fixnpm install @solana/web3.js@1.7.2
npm/@solana/web3.js
Introduced in: 1.6.0Fixed in: 1.6.1
Fixnpm install @solana/web3.js@1.6.1
npm/@solana/web3.js
Introduced in: 1.5.0Fixed in: 1.5.1
Fixnpm install @solana/web3.js@1.5.1
npm/@solana/web3.js
Introduced in: 1.4.0Fixed in: 1.4.1
Fixnpm install @solana/web3.js@1.4.1
npm/@solana/web3.js
Introduced in: 1.3.0Fixed in: 1.3.1
Fixnpm install @solana/web3.js@1.3.1
npm/@solana/web3.js
Introduced in: 1.2.0Fixed in: 1.2.8
Fixnpm install @solana/web3.js@1.2.8
npm/@solana/web3.js
Introduced in: 1.1.0Fixed in: 1.1.2
Fixnpm install @solana/web3.js@1.1.2
npm/@solana/web3.js
Introduced in: 0Fixed in: 1.0.1
Fixnpm install @solana/web3.js@1.0.1

References