~ / search / GHSA-9p6p-8v9r-8c9m

GHSA-9p6p-8v9r-8c9m

javascript-deobfuscator crafted payload can lead to code execution

Source: GitHub Advisory Database (reviewed) High CVE-2024-36120

Packages

EcosystemPackageAffectedFixed in
npm js-deobfuscator < 1.1.0 1.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

javascript-deobfuscator removes common JavaScript obfuscation techniques. Crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0.

References

External links from the advisory. They lead to third-party sites.