GHSA-G6F4-J6C2-W3P3 High severity vulnerability that affects uglify-js

🗓️ 09 Oct 2018 00:39:43Reported by GoogleType

osv🔗 osv.dev👁 2 Views

High severity uglify-js issue in Node.js before 2.4.24; boolean rewrites may bypass security.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Data Science Experience Local - Incorrect Handling of Non-Boolean Comparison During Minification	16 Jun 201814:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
BDU FSTEC	The vulnerability of the uglify-js library in the Aurora application software allows a hacker to execute arbitrary code by exploiting syntax errors in input data.	9 Jun 202100:00	–	bdu_fstec
CNVD	Joyent Node.js UglifyJS Security Bypass Vulnerability	24 Apr 201600:00	–	cnvd
CVE	CVE-2015-8857	23 Jan 201721:00	–	cve
Cvelist	CVE-2015-8857	23 Jan 201721:00	–	cvelist
Debian CVE	CVE-2015-8857	23 Jan 201721:00	–	debiancve
EUVD	EUVD-2017-0154	7 Oct 202500:30	–	euvd
Github Security Blog	Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js	24 Oct 201718:33	–	github