CVE-2015-8857
2 advisories.
npm/uglify-js CVE-2015-8857: critical 9.8, EPSS 3.56%
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Action: Upgrade uglify-js to 2.4.24 or later.
npm i uglify-js@2.4.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.24 | - |
Fixed versions
| 2.4.24 |
Sources
- osv: GHSA-34r7-q49f-h37c
- https://nvd.nist.gov/vuln/detail/CVE-2015-8857
- https://github.com/mishoo/UglifyJS2/issues/751
- https://github.com/lautis/uglifier/commit/4677bfe38142937ff952f95605bcec4618892c3e
- https://github.com/mishoo/UglifyJS2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uglifier/CVE-2015-8857.yml
- https://web.archive.org/web/20200227190830/http://www.securityfocus.com/bid/96410
- https://zyan.scripts.mit.edu/blog/backdooring-js
- http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE-2015-8857 · published · modified · JSON
RubyGems/uglifier CVE-2015-8857: critical 9.8, EPSS 3.56%
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Action: Upgrade uglifier to 2.7.2 or later.
bundle update uglifierAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.2 | - |
Fixed versions
| 2.7.2 |
Sources
- osv: GHSA-34r7-q49f-h37c#RubyGems/uglifier
- https://nvd.nist.gov/vuln/detail/CVE-2015-8857
- https://github.com/mishoo/UglifyJS2/issues/751
- https://github.com/lautis/uglifier/commit/4677bfe38142937ff952f95605bcec4618892c3e
- https://github.com/mishoo/UglifyJS2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uglifier/CVE-2015-8857.yml
- https://web.archive.org/web/20200227190830/http://www.securityfocus.com/bid/96410
- https://zyan.scripts.mit.edu/blog/backdooring-js
- http://www.openwall.com/lists/oss-security/2016/04/20/11
CVE-2015-8857 · published · modified · JSON