Skip to content
OpenAdvisories

Vendor

endojs

2 known vulnerabilities.

Products

endo 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-32792

    ses's global contour bindings leak into Compartment lexical scope

    SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using `ses` and the Compartment API to evaluate third-party code in an…

    endojs endo ses npm