Incorrect Type Conversion or Cast

Overview Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast in the JSConcatStringInPlace function. An attacker can achieve memory corruption and execute arbitrary code by manipulating the type of the left-hand operand during a callback triggered by type...