chakra-core/ChakraCore

chakra-core/ChakraCore

Releases61

Frequency3 weeks 5 days

Last Release over 5 years ago

Stars9.25K

ChakraCore is an open source Javascript engine with a C API.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-37139 ↗	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
CVE-2023-37140 ↗	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().
CVE-2023-37141 ↗	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().
CVE-2023-37142 ↗	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
CVE-2023-37143 ↗	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
CVE-2020-23315 ↗	Jan 20, 2022Thursday, 20 January 2022, 22:15	7.5 HIGH	5 MEDIUM
There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.