{"action":"Upgrade boa_engine to 0.19.0 or later.","affected":[{"fixed":"0.19.0","introduced":"0.16.0"}],"component":"boa_engine","cve_ids":["CVE-2024-43367"],"ecosystem":"crates.io","epss":0.00597,"exploited":false,"fixed_versions":["0.19.0"],"ghsa_id":"GHSA-f67q-wr6w-23jq","id":"tcs_01M5KF9P9ZASA6YAZNJPB149EB","modified_at":"2026-10-12T18:00:06.811772530Z","published_at":"2024-08-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0444","https://crates.io/crates/boa_engine","https://rustsec.org/advisories/RUSTSEC-2024-0444.html","https://github.com/boa-dev/boa/commit/69ea2f52ed976934bff588d6b566bae01be313f7","https://nvd.nist.gov/vuln/detail/CVE-2024-43357"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0444","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0444"}],"summary":"Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`"}