CVE-2016-5172

6.5

MEDIUMCVSS v3

Published

September 25, 2016

CVSS v2

4.3 MEDIUM

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

>= 6.0.0, <= 6.8.1NVD

nodejs

NPM

>= 6.0.0, <= 6.8.1NVD

Node.js

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 6.0.0, <= 6.8.1NVD

Security Advisories

CVE-2016-5172

Description

More on this CVE