CVE-2024-21541

creationtimestamp| type| source ---|---|--- 2024-11-13 05:08:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113473911682411442 2024-11-13 07:28:21+00:00| seen| https://t.me/cvedetector/10803 2025-01-14 17:21:01+00:00| published-proof-of-concept|...

CVE-2024-21541

Versions of the package dom-iterator before 1.0.1 are vulnerable to Arbitrary Code Execution due to use of the Function constructor without complete input sanitization. Function generates a new function body and thus care must be given to ensure that the inputs to Function are not...