crates.io/serde_v8 CVE-2023-28445: critical 9.9, EPSS 0.97%

Deno improperly handles resizable ArrayBuffer

Action: Upgrade serde_v8 to 0.88.0 or later.

cargo update -p serde_v8 --precise 0.88.0

Affected

Fixed versions

Sources

• osv: GHSA-c25x-cm9x-qqgx#crates.io/serde_v8
• https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx
• https://nvd.nist.gov/vuln/detail/CVE-2023-28445
• https://github.com/denoland/deno/pull/18395
• https://github.com/denoland/deno/pull/18452
• https://github.com/denoland/deno
• https://github.com/denoland/deno/releases/tag/v1.32.1

CVE-2023-28445 · published 2023-03-23T23:13:25Z · modified 2023-11-08T04:12:11.261571Z · JSON