CVE-2017-1001004

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

Score

CVSS 3.0 8.8 High

Status

Modified - 46fe6300-5254-4a98-9594-a9567bec8179

Published

2017-11-27

Last modified

2024-09-16

Weaknesses

CWE-20, CWE-94

Affected products

• Typed-function (Typed-function)
• Typed Function (Typed Function Project)

References

• https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106
• https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe