{"id":"GHSA-8m45-2rjm-j347","summary":"Handling untrusted input can result in a crash, leading to loss of availability / denial of service","details":"Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM).\n\nIf you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your application/service may crash, resulting in a loss of availability.","aliases":["CVE-2024-30253"],"modified":"2026-08-24T00:34:53.725985511Z","published":"2024-04-17T18:21:18Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2024-04-17T18:21:18Z","nvd_published_at":"2024-04-17T15:15:07Z","cwe_ids":["CWE-119"],"severity":"HIGH"},"references":[{"type":"WEB","url":"https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-8m45-2rjm-j347"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30253"},{"type":"WEB","url":"https://github.com/solana-labs/solana-web3.js/commit/77d935221a4805107b20b60ae7c1148725e4e2d0"},{"type":"PACKAGE","url":"https://github.com/solana-labs/solana-web3.js"}],"affected":[{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.91.0"},{"fixed":"1.91.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.90"},{"fixed":"1.90.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.89"},{"fixed":"1.89.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.88.0"},{"fixed":"1.88.1"}]}],"versions":["1.88.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.87.0"},{"fixed":"1.87.7"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.86.0"},{"fixed":"1.86.1"}]}],"versions":["1.86.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.85.0"},{"fixed":"1.85.1"}]}],"versions":["1.85.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.84.0"},{"fixed":"1.84.1"}]}],"versions":["1.84.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.83.0"},{"fixed":"1.83.1"}]}],"versions":["1.83.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.82.0"},{"fixed":"1.82.1"}]}],"versions":["1.82.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.81.0"},{"fixed":"1.81.1"}]}],"versions":["1.81.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.80.0"},{"fixed":"1.80.1"}]}],"versions":["1.80.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.79.0"},{"fixed":"1.79.1"}]}],"versions":["1.79.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.78"},{"fixed":"1.78.8"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.77"},{"fixed":"1.77.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.76.0"},{"fixed":"1.76.1"}]}],"versions":["1.76.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.75.0"},{"fixed":"1.75.1"}]}],"versions":["1.75.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.74.0"},{"fixed":"1.74.1"}]}],"versions":["1.74.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.73.0"},{"fixed":"1.73.5"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.72.0"},{"fixed":"1.72.1"}]}],"versions":["1.72.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.71.0"},{"fixed":"1.71.1"}]}],"versions":["1.71.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.70.0"},{"fixed":"1.70.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.69.0"},{"fixed":"1.69.1"}]}],"versions":["1.69.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.68.0"},{"fixed":"1.68.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.67.0"},{"fixed":"1.67.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.66.0"},{"fixed":"1.66.6"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.65.0"},{"fixed":"1.65.1"}]}],"versions":["1.65.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.64.0"},{"fixed":"1.64.1"}]}],"versions":["1.64.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.63.0"},{"fixed":"1.63.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.62.0"},{"fixed":"1.62.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.61.0"},{"fixed":"1.61.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.60.0"},{"fixed":"1.60.1"}]}],"versions":["1.60.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.59.0"},{"fixed":"1.59.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.58.0"},{"fixed":"1.58.1"}]}],"versions":["1.58.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.57.0"},{"fixed":"1.57.1"}]}],"versions":["1.57.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.56.0"},{"fixed":"1.56.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.55.0"},{"fixed":"1.55.1"}]}],"versions":["1.55.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.54.0"},{"fixed":"1.54.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.53.0"},{"fixed":"1.53.1"}]}],"versions":["1.53.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.52.0"},{"fixed":"1.52.1"}]}],"versions":["1.52.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.51.0"},{"fixed":"1.51.1"}]}],"versions":["1.51.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.50.0"},{"fixed":"1.50.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.49.0"},{"fixed":"1.49.1"}]}],"versions":["1.49.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.48.0"},{"fixed":"1.48.1"}]}],"versions":["1.48.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.47.0"},{"fixed":"1.47.5"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.46.0"},{"fixed":"1.46.1"}]}],"versions":["1.46.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.45.0"},{"fixed":"1.45.1"}]}],"versions":["1.45.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.44.0"},{"fixed":"1.44.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.43.0"},{"fixed":"1.43.7"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.42.0"},{"fixed":"1.42.1"}]}],"versions":["1.42.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.41.0"},{"fixed":"1.41.11"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.40.0"},{"fixed":"1.40.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.39.0"},{"fixed":"1.39.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.38.0"},{"fixed":"1.38.1"}]}],"versions":["1.38.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.37.0"},{"fixed":"1.37.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.36.0"},{"fixed":"1.36.1"}]}],"versions":["1.36.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.35.0"},{"fixed":"1.35.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.34.0"},{"fixed":"1.34.1"}]}],"versions":["1.34.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.33.0"},{"fixed":"1.33.1"}]}],"versions":["1.33.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.32.0"},{"fixed":"1.32.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.31.0"},{"fixed":"1.31.1"}]}],"versions":["1.31.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.30.0"},{"fixed":"1.30.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.29.0"},{"fixed":"1.29.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.28.0"},{"fixed":"1.28.1"}]}],"versions":["1.28.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.27.0"},{"fixed":"1.27.1"}]}],"versions":["1.27.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.26.0"},{"fixed":"1.26.1"}]}],"versions":["1.26.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.25.0"},{"fixed":"1.25.1"}]}],"versions":["1.25.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.24.0"},{"fixed":"1.24.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.23.0"},{"fixed":"1.23.1"}]}],"versions":["1.23.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.22.0"},{"fixed":"1.22.1"}]}],"versions":["1.22.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.21.0"},{"fixed":"1.21.1"}]}],"versions":["1.21.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.20.0"},{"fixed":"1.20.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.19.0"},{"fixed":"1.19.1"}]}],"versions":["1.19.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.1"}]}],"versions":["1.18.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.17.0"},{"fixed":"1.17.1"}]}],"versions":["1.17.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.16.0"},{"fixed":"1.16.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.15.0"},{"fixed":"1.15.1"}]}],"versions":["1.15.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.14.0"},{"fixed":"1.14.1"}]}],"versions":["1.14.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.13.0"},{"fixed":"1.13.1"}]}],"versions":["1.13.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.12.0"},{"fixed":"1.12.1"}]}],"versions":["1.12.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.11.0"},{"fixed":"1.11.1"}]}],"versions":["1.11.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.10.0"},{"fixed":"1.10.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.9.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.1"}]}],"versions":["1.8.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.7.0"},{"fixed":"1.7.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.6.0"},{"fixed":"1.6.1"}]}],"versions":["1.6.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.1"}]}],"versions":["1.5.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.0"},{"fixed":"1.4.1"}]}],"versions":["1.4.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.3.0"},{"fixed":"1.3.1"}]}],"versions":["1.3.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.2.0"},{"fixed":"1.2.8"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.1.0"},{"fixed":"1.1.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}},{"package":{"name":"@solana/web3.js","ecosystem":"npm","purl":"pkg:npm/%40solana/web3.js"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-8m45-2rjm-j347/GHSA-8m45-2rjm-j347.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}