GitHub Advisoryadvisory · npm

GHSA-9p6p-8v9r-8c9m javascript-deobfuscator crafted payload can lead to code execution

HIGH Published 2024-06-04 Modified 2024-06-04 Official page ↗
Aliases
CVE-2024-36120
Ecosystem
npm
Packages
js-deobfuscator
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2024-06-04

Affected packages

• npm js-deobfuscator: < 1.1.0 → fixed in 1.1.0

Description

javascript-deobfuscator removes common JavaScript obfuscation techniques. Crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0.

Related

Alias · CVE (1)

  • CVE-2024-36120 javascript-deobfuscator removes common JavaScript obfuscation techniques. vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References