Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2023-30543: @web3-react is a framework for building Ethereum Apps

26
Routine
MEDIUM 5.2UPGRADEUPGRADEUPGRADE

CVE-2023-30543 is a medium-severity flaw (CVSS 5.2) affecting web3-react coinbase-wallet, web3-react eip1193, web3-react metamask. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

@web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection flow. This means that the value of `chainId` returned by `useWeb3React()` may be incorrect. In an application, this means that any data derived from `chainId` could be incorrect. For example, if a swapping application derives a wrapped token contract address from the `chainId` *and* a user

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score5.2 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededHigh
User interactionRequired
EPSS exploit chance0.4% (top 68%)
CISA exploited listNo
WeaknessCWE-362
Published2023-04-17
Last modified2026-06-17
Publisher (CNA): GitHub, Inc. · Vendor: uniswap

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

uniswap web3-react coinbase-wallet UPGRADE
Affected: >= 6.0.0 and <= 6.2.14 · 7.0.0 alpha0 · 7.0.1 alpha0 · 7.0.2 alpha0 · 8.0.22 beta0 · 8.0.23 beta0 · 8.0.24 beta0 · 8.0.25 beta0
Fixed in: newer than 6.2.14
Safe to downgrade to: a release before 6.0.0
1. Check installed version
npm ls web3-react-coinbase-wallet
2. UPGRADE to newer than 6.2.14
npm install web3-react-coinbase-wallet@">6.2.14"
3. If no update is available yet, DOWNGRADE to a release before 6.0.0
npm view web3-react-coinbase-wallet versions npm install web3-react-coinbase-wallet@"<6.0.0"
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
uniswap web3-react eip1193 UPGRADE
Affected: >= 6.0.0 and <= 6.2.14 · 7.0.0 alpha0 · 7.0.1 alpha0 · 7.0.2 alpha0 · 8.0.0 beta0 · 8.0.1 beta0 · 8.0.2 beta0 · 8.0.3 beta0
Fixed in: newer than 6.2.14
Safe to downgrade to: a release before 6.0.0
1. Check installed version
npm ls web3-react-eip1193
2. UPGRADE to newer than 6.2.14
npm install web3-react-eip1193@">6.2.14"
3. If no update is available yet, DOWNGRADE to a release before 6.0.0
npm view web3-react-eip1193 versions npm install web3-react-eip1193@"<6.0.0"
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
uniswap web3-react metamask UPGRADE
Affected: >= 6.0.0 and <= 6.2.14 · 8.0.0 beta0 · 8.0.1 beta0 · 8.0.2 beta0 · 8.0.3 beta0 · 8.0.4 beta0 · 8.0.5 beta0 · 8.0.6 beta0
Fixed in: newer than 6.2.14
Safe to downgrade to: a release before 6.0.0
1. Check installed version
npm ls web3-react-metamask
2. UPGRADE to newer than 6.2.14
npm install web3-react-metamask@">6.2.14"
3. If no update is available yet, DOWNGRADE to a release before 6.0.0
npm view web3-react-metamask versions npm install web3-react-metamask@"<6.0.0"
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
uniswap web3-react walletconnect UPGRADE
Affected: >= 6.0.0 and <= 6.2.14 · 7.0.0 alpha0 · 7.0.1 alpha0 · 7.0.2 alpha0 · 8.0.0 beta0 · 8.0.1 beta0 · 8.0.2 beta0 · 8.0.3 beta0
Fixed in: newer than 6.2.14
Safe to downgrade to: a release before 6.0.0
1. Check installed version
npm ls web3-react-walletconnect
2. UPGRADE to newer than 6.2.14
npm install web3-react-walletconnect@">6.2.14"
3. If no update is available yet, DOWNGRADE to a release before 6.0.0
npm view web3-react-walletconnect versions npm install web3-react-walletconnect@"<6.0.0"
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-30543?

web3-react coinbase-wallet: upgrade to newer than 6.2.14; web3-react eip1193: upgrade to newer than 6.2.14; web3-react metamask: upgrade to newer than 6.2.14. Exact commands for each OS are on this page.

Is CVE-2023-30543 being exploited?

CVE-2023-30543 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-30543 affect?

CVE-2023-30543 affects web3-react coinbase-wallet, web3-react eip1193, web3-react metamask. Severity is medium (CVSS 5.2). @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection flow. This means that the value of `chainId` returned by `useWeb3React()` may be

How urgent is CVE-2023-30543?

Priority 26/100. No elevated risk signals yet.

Software pages

React vulnerabilities

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.