solana-labs vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20242

Newest CVEs

• CVE-2024-54134

  @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material

  solana-labs · solana-web3.js

  High8.3
• CVE-2024-30253

  Handling untrusted input can result in a crash, leading to loss of availability / denial of service

  solana-labs · solana-web3.js

  High7.5
• CVE-2022-35917

  Weakness in Transfer Validation Logic in @solana/pay

  solana-labs · solana-pay

  Medium5.3
• CVE-2022-23066

  Solana rBPF - Incorrect Calculation in sdiv instruction

  solana-labs · rbpf

  Critical9.1