Lucene search
+L

3 matches found

OSV
OSV
added 2025/12/03 8:16 p.m.9 views

AZL-71503 CVE-2025-66453 affecting package rhino 1.7.7.1-2

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...

7.5CVSS7.2AI score0.00265EPSS
SaveExploits0References1
Rows per page
Query Builder