`chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/metamask

Description

chainId may be outdated if the user changes chains as part of the connection flow. This means that the value of chainId returned by useWeb3React() may be incorrect. In an application, this means that any data derived from chainId could be incorrect.

Recommendation

Update the @web3-react/metamask package to the latest compatible version. Followings are version details:

• Affected version(s): >= 6.0.0, < 8.0.30-beta.0
• Patched version(s): 8.0.30-beta.0

References

• GHSA-8pf3-6fgr-3g3g
• CVE-2023-30543
• CWE-362
• CAPEC-310
• OWASP 2021-A6

Related Issues

• `chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/coinbase-wallet - CVE-2023-30543
• `chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/eip1193 - CVE-2023-30543
• `chainId` may be outdated if user changes chains as part of connection in @web3-react - CVE-2023-30543
• Strapi may leak sensitive user information, user reset password, tokens via content-manager views - CVE-2023-36472

You might also like:

How to Secure your NodeJs Express Javascript Application - part 2

How to Secure your NodeJs Express Javascript Application - part 1

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@web3-react/metamask