crates.io/boa_engine CVE-2024-43367: high 8.6, EPSS 0.60%

Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`

Action: Upgrade boa_engine to 0.19.0 or later.

cargo update -p boa_engine --precise 0.19.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2024-0444
• https://crates.io/crates/boa_engine
• https://rustsec.org/advisories/RUSTSEC-2024-0444.html
• https://github.com/boa-dev/boa/commit/69ea2f52ed976934bff588d6b566bae01be313f7
• https://nvd.nist.gov/vuln/detail/CVE-2024-43357

CVE-2024-43367 · published 2024-08-14T12:00:00Z · modified 2026-10-12T18:00:06.811772530Z · JSON