{"id":"CVE-2022-35917","aliases":["GHSA-j47c-j42c-mwqq"],"url":"https://o3.security/vulnerability/CVE-2022-35917","summary":"Weakness in Transfer Validation Logic in @solana/pay","details":"### Description\nWhen a Solana Pay transaction is located using a [reference key](https://github.com/solana-labs/solana-pay/blob/master/SPEC.md#reference), it may be checked to represent a transfer of the desired amount to the recipient, using the supplied [`validateTransfer` function](https://github.com/solana-labs/solana-pay/blob/master/core/src/validateTransfer.ts). An edge case regarding this mechanism could cause the validation logic to validate multiple transfers.\n\n### Impact\nMost known Solana Pay point of sale applications are currently run on physical point of sale devices, which makes this issue unlikely to occur. However, there may be web-based point of sale applications using the protocol where it may be more likely to occur.\n\n### Patches\nThis issue has been patched as of version [`0.2.1`](https://www.npmjs.com/package/@solana/pay/v/0.2.1). Users of the Solana Pay SDK should upgrade to it.","published":"2022-08-01T21:10:11Z","modified":"2026-08-12T03:51:20.031268305Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"@solana/pay","fixedVersion":"0.2.1"}],"fix":{"url":"https://github.com/solana-labs/solana-pay/commit/ac6ce0d0a81137700874a8bf5a7caac3be999fad","label":"solana-labs/solana-pay@ac6ce0d"},"references":[{"type":"WEB","url":"https://github.com/solana-labs/solana-pay/blob/master/SPEC.md#reference"},{"type":"WEB","url":"https://github.com/solana-labs/solana-pay/blob/master/core/src/validateTransfer.ts"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35917.json"},{"type":"ADVISORY","url":"https://github.com/solana-labs/solana-pay/security/advisories/GHSA-j47c-j42c-mwqq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35917"},{"type":"FIX","url":"https://github.com/solana-labs/solana-pay/commit/ac6ce0d0a81137700874a8bf5a7caac3be999fad"},{"type":"PACKAGE","url":"https://github.com/solana-labs/solana-pay"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:20.031268305Z"}}