622 matches found
UBUNTU-CVE-2025-4918
An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...
Mozilla Firefox ESR < 128.10.1
The version of Firefox ESR installed on the remote Windows host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-37 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index...
KLA83718 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds memory read or write vulnerability can be exploited to cause denial of service. 2. Out of bounds memo...
PT-2025-21810 · Mozilla +1 · Firefox +1
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 138.0.4 Firefox ESR versions prior to 128.10.1 Description: The issue allows an attacker to perform an out-of-bounds read or write on a JavaScript Promise object. Recommendations: For Firefox versions prior to 138.0....
Security Vulnerabilities fixed in Firefox ESR 115.23.1 — Mozilla
An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions prior to 138.0.4, which stems from an out-of-bounds read or write to a JavaScript Promise object...
Mimalloc Can Allocate Memory with Bad Alignment
This crate depended on a promise regarding alignments made by the author of the mimalloc allocator to avoid using aligned allocation functions where possible for performance reasons. Since then, the mimalloc allocator's logic changed, making it break this promise. This caused this crate to return...
Denial Of Service (DoS)
http-proxy-middleware is vulnerable to Denial of Service DoS. The vulnerability is due to an unhandled promise rejection error caused by micromatch, which can allow an attacker to crash the server by making requests to certain paths...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths. PoC 1 Run a server like this: js const express =...
CVE-2024-43357
ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript JavaScript specification of async generators, introduced by a May 2021 spec refactor, may lead to mis-implementation in a way that could present as a security vulnerability, such as type...
Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...
RUSTSEC-2024-0444 Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`
A wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Details Boa's implementation of AsyncGenerator makes the assumption that the state of an AsyncGenerator object cannot change while resolving a promise created by method...
Malicious code in delivery-promise (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in npm_package_dependencies_promise_polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 812a88e649d4ae3319f178ec2ba4be3b92660d1887021d1525e1c46baa5618f6 The OpenSSF Package Analysis project identified 'npmpackagedependenciespromisepolyfill' @ 8.3.0 npm as malicious. It is considered malicious...
CVE-2023-37466
A flaw was found in the vm2 Promise handler sanitization, which allows attackers to escape the sandbox. This flaw allows attackers to run arbitrary code. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criter...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows a attacker to escape from a isolated programming environment and execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to improper code generation during the processing of Promise objects with the @@species parameter. Exploiting this vulnerability allows a remote attacker to escape from a isolated programming environment and execute arbitrary...
Sandbox Escape
vm2 is vulnerable to Sandbox Escape. The vulnerability exists because the library does not properly sanitize a Promise return, allowing an attacker to escape the sandbox and inject and execute malicious code...
CVE-2023-37466
vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...
CVE-2023-37466 vm2 Sandbox Escape vulnerability
vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...