LavaDome

LavaDome 🌋️ A newLavaMoat tool for DOM nodes secured E ncapsulation ⚠️ EXPERIMENTAL WIP - USE AT YOUR OWN RISK learn more Demo Take a crack atLavaDome - visit the demo app, open the console, and do whatever in your power to steal the secret from within the LavaDome instance report your success...

@lavamoat/git-safe-dependencies (>=0.1.1, <=0.2.1) potentially affected by CVE-2025-4759 via lockfile-lint-api (5.9.1)

lockfile-lint-api NPM version 5.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on lockfile-lint-api and may be impacted: - @lavamoat/git-safe-dependencies =0.1.1, =0.2.1 Source cves: CVE-2025-4759 Source advisory: SNYK:JS-LOCKFILELINTAPI-10169587...

GHSA-WHPX-Q3RQ-W8JC Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...