CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
概要
javascript-deobfuscator crafted payload can lead to code execution
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the expression simplification feature.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com