Description
typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| typed-function | typed-function | 0.10.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | typed-function | < 0.10.6 | 0.10.6 | GHSA-3qh4-r86r-grvm |