Solana-labs vulnerabilities
We track 3 vulnerabilities in Solana-labs products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 4, 2024.
Latest Solana-labs vulnerabilities
- 8.3 High severity
solana-web3.js: Exposure of Sensitive Information to an Unauthorized Actor
A publish-access account was compromised for `@solana/web3.js`, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material
- 7.5 High severity
solana-web3.js: Improper Restriction of Operations within the Bounds of a Memory Buffer
@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhaustion (OOM). If you have a server, client, mobile, or desktop product that accepts untrusted input for use with `@solana/web3.js`, your appl
- 9.1 Critical severity
rbpf: Incorrect Calculation
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sd