CVE-2015-8857

🗓️ 23 Jan 2017 21:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 26 Views

The uglify-js package for Node.js before 2.4.24 does not properly account for non-boolean values, allowing attackers to bypass security mechanisms or have other unspecified impacts

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Incorrect Handling of Non-Boolean Comparison During Minification	16 Jun 201814:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
BDU FSTEC	The vulnerability of the uglify-js library in the Aurora application software allows a hacker to execute arbitrary code by exploiting syntax errors in input data.	9 Jun 202100:00	–	bdu_fstec
CNVD	Joyent Node.js UglifyJS Security Bypass Vulnerability	24 Apr 201600:00	–	cnvd
CVE	CVE-2015-8857	23 Jan 201721:00	–	cve
Cvelist	CVE-2015-8857	23 Jan 201721:00	–	cvelist
EUVD	EUVD-2017-0154	7 Oct 202500:30	–	euvd
Github Security Blog	Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js	24 Oct 201718:33	–	github
Github Security Blog	High severity vulnerability that affects uglify-js	9 Oct 201800:39	–	github