02 Records
FEED: ACQUIRING
01 RecordSTATE: PUBLISHED
02 Description
CNA: GitHub_MHandling untrusted input can result in a crash, leading to loss of availability / denial of service
03 Exploitation and scoring
SRC: CISA, FIRST, NVD, RED HAT- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
- Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.- EPSS probability
- 0.59% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Ranks above 46.0% of scored records. A rank, not a probability.
- NVD base score
- 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVD analysis status
- Deferred. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
SCHEMA: 5.1
- Published
- 2024-04-17 15:07Z2 YR AGO
- Last updated
- 2024-08-21 15:05Z2 YR AGO
- Reserved
- 2024-03-26
- Assigning CNA
- GitHub_M
- Record state
- PUBLISHED
- Severity
- High (CVSS 7.5)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
- Data version
- 5.1
- Document digest
- 7044e11c732a11b3d7809402ca793724f8556eb8984b9cdf52186e693efeef11
05 Affected products
PAIRS: 2VendorProductVersionsPlatforms
solana-labssolana-web3.js>= 1.91.0, < 1.91.3, >= 1.90, < 1.90.2, >= 1.89, < 1.89.2, = 1.88.0, >=1.87.0, < 1.87.7, = 1.86.0, = 1.85.0, = 1.84.0, = 1.83.0, = 1.82.0, = 1.81.0, = 1.80.0, = 1.79.0, >= 1.78, < 1.78.8, >= 1.77, < 1.77.4, = 1.76.0, = 1.75.0, = 1.74.0, >= 1.73.0, < 1.73.5, = 1.72.0, = 1.71.0, >= 1.70.0, < 1.70.4, = 1.69.0, >= 1.68.0, < 1.68.2, >= 1.67.0, < 1.67.3, >= 1.66.0, < 1.66.6, = 1.65.0, = 1.64.0, >= 1.63.0, < 1.63.2, >= 1.62.0, < 1.62.2, >= 1.61.0, < 1.61.2, = 1.60.0, >= 1.59.0, < 1.59.2, = 1.58.0, = 1.57.0, >= 1.56.0, < 1.56.3, = 1.55.0, >= 1.54.0, < 1.54.2, = 1.53.0, = 1.52.0, = 1.51.0, >= 1.50.0, < 1.50.2, = 1.49.0, = 1.48.0, >= 1.47.0, < 1.47.5, = 1.46.0, = 1.45.0, >= 1.44.0, < 1.44.4, >= 1.43.0, < 1.43.7, = 1.42.0, >= 1.41.0, < 1.41.11, >= 1.40.0, < 1.40.2, >= 1.39.0, < 1.39.2, = 1.38.0, >= 1.37.0, < 1.37.3, = 1.36.0, >= 1.35.0, < 1.35.2, = 1.34.0, = 1.33.0, >= 1.32.0, < 1.32.2, = 1.31.0, >= 1.30.0, < 1.30.3, >= 1.29.0, < 1.29.4, = 1.28.0, = 1.27.0, = 1.26.0, = 1.25.0, >= 1.24.0, < 1.24.3, = 1.23.0, = 1.22.0, = 1.21.0, >= 1.20.0, < 1.20.3, = 1.19.0, = 1.18.0, = 1.17.0, >= 1.16.0, < 1.16.2, = 1.15.0, = 1.14.0, = 1.13.0, = 1.12.0, = 1.11.0, >= 1.10.0, < 1.10.2, >= 1.9.0, < 1.9.2, = 1.8.0, >= 1.7.0, < 1.7.2, = 1.6.0, = 1.5.0, = 1.4.0, = 1.3.0, >= 1.2.0, < 1.2.8, >= 1.1.0, < 1.1.2, < 1.0.1— solanalabsweb31.91.0 to < 1.91.3, 1.90 to < 1.90.2, 1.89 to < 1.89.2, 1.88.0, 1.87.0 to < 1.87.7, 1.86.0, 1.85.0, 1.84.0, 1.83.0, 1.82.0, 1.81.0, 1.80.0, 1.79.0, 1.78 to < 1.78.8, 1.77 to < 1.77.4, 1.76.0, 1.75.0, 1.74.0, 1.73.0 to < 1.73.5, 1.72.0, 1.71.0, 1.70.0 to < 1.70.4, 1.69.0, 1.68.0 to < 1.68.2, 1.67.0 to < 1.67.3, 1.66.0 to < 1.66.6, 1.65.0, 1.64.0, 1.63.0 to < 1.63.2, 1.62.0 to < 1.62.2, 1.61.0 to < 1.61.2, 1.60.0, 1.59.0 to < 1.59.2, 1.58.0, 1.57.0, 1.56.0 to < 1.56.3, 1.55.0, 1.54.0 to < 1.54.2, 1.53.0, 1.52.0, 1.51.0, 1.50.0 to < 1.50.2, 1.49.0, 1.48.0, 1.47.0 to < 1.47.5, 1.46.0, 1.45.0, 1.44.0 to < 1.44.4, 1.43.0 to < 1.43.7, 1.42.0, 1.41.0 to < 1.41.11, 1.40.0 to < 1.40.2, 1.39.0 to < 1.39.2, 1.38.0, 1.37.0 to < 1.37.3, 1.36.0, 1.35.0 to < 1.35.2, 1.34.0, 1.33.0, 1.32.0 to < 1.32.2, 1.31.0, 1.30.0 to < 1.30.3, 1.29.0 to < 1.29.4, 1.28.0, 1.27.0, 1.26.0, 1.25.0, 1.24.0 to < 1.24.3, 1.23.0, 1.22.0, 1.21.0, 1.20.0 to < 1.20.3, 1.19.0, 1.18.0, 1.17.0, 1.16.0 to < 1.16.2, 1.15.0, 1.14.0, 1.13.0, 1.12.0, 1.11.0, 1.10.0 to < 1.10.2, 1.9.0 to < 1.9.2, 1.8.0, 1.7.0 to < 1.7.2, 1.6.0, 1.5.0, 1.4.0, 1.3.0, 1.2.0 to < 1.2.8, 1.1.0 to < 1.1.2, 0 to < 1.0.1—