CVE-2025-32792

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

CVE-2025-32792 ses's global contour bindings leak into Compartment lexical scope

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

CVE-2025-32792 ses's global contour bindings leak into Compartment lexical scope

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...

@5minds/processcube_engine (>=19.0.0-beta.8, <=20.0.0-renovate-fd1892-me5sbqz0), @bitcoin-computer/components (>=0.24.1-beta.0, <=0.26.0-beta.0) +8 more potentially affected by CVE-2025-32792 via ses (>=1.0.0, <=1.11.0)

ses NPM version =1.0.0, =19.0.0-beta.8, =0.24.1-beta.0, =0.18.0-beta.0, =4.4.0, =0.0.1, =0.3.0-beta.0, =4.3.0-alpha.1, =4.5.0, =16.2.0, =16.3.2 Source cves: CVE-2025-32792 Source advisory: OSV:GHSA-H9W6-F932-GQ62...