@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1911 via hermes-engine (>=0.0.0, <=0.5.1)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1911 Source advisory: OSV:GHSA-F5X2-XV93-4P23...

CVE-2020-1911

A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only...

CVE-2020-1911

CVE-2020-1911 concerns a type confusion in Facebook Hermes when resolving properties of JavaScript objects with specially-crafted prototype chains, prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da. The vulnerability could allow arbitrary code execution if untrusted JavaScript is evaluated...