CVE-2023-45811

npm/deobfuscator CVE-2023-45811: high 7.8

Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Action: Upgrade deobfuscator to 2.4.4 or later.

npm i deobfuscator@2.4.4

Affected

Fixed versions

Sources

• osv: GHSA-jg82-xh3w-rhxx
• https://github.com/relative/synchrony/security/advisories/GHSA-jg82-xh3w-rhxx
• https://nvd.nist.gov/vuln/detail/CVE-2023-45811
• https://github.com/relative/synchrony/commit/b583126be94c4db7c5a478f1c5204bfb4162cf40
• https://github.com/relative/synchrony
• https://github.com/relative/synchrony/security/advisories/src/transformers/literalmap.ts

CVE-2023-45811 · published 2023-10-18T18:27:13Z · modified 2025-07-22T15:37:30Z · JSON