`chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/eip1193

Description

chainId may be outdated if the user changes chains as part of the connection flow. This means that the value of chainId returned by useWeb3React() may be incorrect. In an application, this means that any data derived from chainId could be incorrect.

Recommendation

Update the @web3-react/eip1193 package to the latest compatible version. Followings are version details:

• Affected version(s): >= 6.0.0, < 8.0.27-beta.0
• Patched version(s): 8.0.27-beta

References

• GHSA-8pf3-6fgr-3g3g
• CVE-2023-30543
• CWE-362
• CAPEC-310
• OWASP 2021-A6

Related Issues

• `chainId` may be outdated if user changes chains as part of connection in @web3-react - CVE-2023-30543
• `chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/metamask - CVE-2023-30543
• `chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/coinbase-wallet - CVE-2023-30543
• Strapi may leak sensitive user information, user reset password, tokens via content-manager views - CVE-2023-36472

You might also like:

How to Secure your NodeJs Express Javascript Application - part 2

How to Secure your NodeJs Express Javascript Application - part 1

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@web3-react/eip1193