CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Résumé
javascript-deobfuscator crafted payload can lead to code execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the expression simplification feature.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com