Skip to content
OpenAdvisories

Vendor

endojs

2 known vulnerabilities.

Products

endo 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-39532

    SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution

    SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to 0.17.1, 0.16.0 prior to 0.16.1, 0.15.0 prior to 0.15.24, 0.14.0 prior to 0.14.5, an 0.13.0 prior to 0.13.5, th…

    endojs endo ses npm