Lucene search
+L

1 matches found

OSV
OSV
added 2023/08/08 4:51 p.m.36 views

CVE-2023-39532 SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution

SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to 0.17.1, 0.16.0 prior to 0.16.1, 0.15.0 prior to 0.15.24, 0.14.0 prior to 0.14.5, an 0.13.0 prior to 0.13.5, there is a hole in the confinement of...

9.8CVSS9.4AI score0.01234EPSS
SaveExploits1References4
Rows per page
Query Builder