npm/ses CVE-2025-32792: high 8.7, EPSS 0.59%

ses's global contour bindings leak into Compartment lexical scope

Action: Upgrade ses to 1.12.0 or later.

npm i ses@1.12.0

Affected

Fixed versions

Sources

• osv: GHSA-h9w6-f932-gq62
• nvd: CVE-2025-32792
• https://github.com/endojs/endo/security/advisories/GHSA-h9w6-f932-gq62
• https://github.com/endojs/endo

CVE-2025-32792 · published 2025-04-18T15:10:05Z · modified 2025-04-18T18:34:51Z · JSON