CVE-2024-43367
2 advisories.
crates.io/boa_engine CVE-2024-43367: high 7.5, EPSS 0.60%
Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects
Action: Upgrade boa_engine to 0.19.0 or later.
cargo update -p boa_engine --precise 0.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.16 | 0.19.0 | - |
Fixed versions
| 0.19.0 |
Sources
- osv: GHSA-f67q-wr6w-23jq
- https://github.com/boa-dev/boa/security/advisories/GHSA-f67q-wr6w-23jq
- https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r
- https://nvd.nist.gov/vuln/detail/CVE-2024-43367
- https://github.com/boa-dev/boa/commit/69ea2f52ed976934bff588d6b566bae01be313f7
- https://github.com/boa-dev/boa
- https://rustsec.org/advisories/RUSTSEC-2024-0444.html
CVE-2024-43367 · published · modified · JSON
crates.io/boa_engine CVE-2024-43367: high 8.6, EPSS 0.60%
Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`
Action: Upgrade boa_engine to 0.19.0 or later.
cargo update -p boa_engine --precise 0.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.16.0 | 0.19.0 | - |
Fixed versions
| 0.19.0 |
Sources
- osv: RUSTSEC-2024-0444
- https://crates.io/crates/boa_engine
- https://rustsec.org/advisories/RUSTSEC-2024-0444.html
- https://github.com/boa-dev/boa/commit/69ea2f52ed976934bff588d6b566bae01be313f7
- https://nvd.nist.gov/vuln/detail/CVE-2024-43357
CVE-2024-43367 · published · modified · JSON