Skip to content
OpenAdvisories

Package · crates.io

viperjs

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    A `BigInt` division panics, and two neighbouring operations answer wrongly in silence

    `viperjs` is a JavaScript engine intended to run untrusted script inside a host application, so script text is data rather than a trusted caller and a panic reachable from script is a denial of service in the embedder's process. A divisor whose magnitude land…