solana-labs

Products

Product	CVEs	Exploited	Latest
solana-web3.js	2	–	Dec 4, 2024
rbpf	1	–	May 9, 2022
solana-pay	1	–	Aug 1, 2022

CVE-2024-54134 High 8.3 @solana/web3.js modified package published to npm, containing malware that exfiltrates private key material 0.5%
CVE-2024-30253 High 7.5 Handling untrusted input can result in a crash, leading to loss of availability / denial of service 0.6%
CVE-2022-35917 Medium 5.3 Weakness in Transfer Validation Logic in @solana/pay 0.9%
CVE-2022-23066 Critical 9.1 Solana rBPF - Incorrect Calculation in sdiv instruction 2.5%