Описание
The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.8.29-3 |
| cosmic | not-affected | 2.8.29-3 |
| devel | not-affected | 2.8.29-3 |
| disco | not-affected | 2.8.29-3 |
| eoan | not-affected | 2.8.29-3 |
| esm-apps/bionic | not-affected | 2.8.29-3 |
| esm-apps/focal | not-affected | 2.8.29-3 |
| esm-apps/jammy | not-affected | 2.8.29-3 |
| esm-apps/noble | not-affected | 2.8.29-3 |
Показывать по
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript.
The uglify-js package before 2.4.24 for Node.js does not properly acco ...
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Уязвимость библиотеки uglify-js прикладного программного обеспечения Аврора Центр, связанная с ошибками проверки синтаксиса входных данных, позволяющая нарушителю выполнить произвольный код
7.5 High
CVSS2
9.8 Critical
CVSS3