Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-1001004
6.8
MEDIUMCVSS v2
Published
November 27, 2017
Affected
2 projects
Assigned by
46fe6300-5254-4a98-9594-a9567bec8179
Severity scale
010
Description
typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.
NPM
GitHub