7 matches found
GHSA-F86P-H4J2-7QGJ Seroval: Code injection through a typed array's own constructor property
Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in the output is read from a property that data on the value can replace, and it is written without checks. A typed array that received properties from untrusted data can then put arbitra...
5.3CVSS6.4AI score0.00268EPSS
SaveExploits0References5
20