AZL-71221 CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...

UBUNTU-CVE-2025-66453

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...

CVE-2025-66453

CVE-2025-66453 concerns the Rhino JavaScript engine. The vulnerability occurs when an application passes an attacker-controlled float poing number into the toFixed() function, which can cause high CPU usage and potentially lead to a Denial of Service. Affected versions are prior to 1.8.1, 1.7.15....