npm/hermes-engine CVE-2021-24037: critical 9.8, EPSS 1.80%

Use After Free in Hermes

Action: Upgrade hermes-engine to 0.8.0 or later.

npm i hermes-engine@0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-mph8-6787-r8hw
• https://nvd.nist.gov/vuln/detail/CVE-2021-24037
• https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e
• https://github.com/facebook/hermes
• https://www.facebook.com/security/advisories/CVE-2021-24037

CVE-2021-24037 · published 2022-05-24T19:05:34Z · modified 2023-11-08T04:05:14.292460Z · JSON