chakra-core/ChakraCore

chakra-core/ChakraCore

Releases61

Frequency3 weeks 5 days

Last Releaseover 5 years ago

Stars9.26K

ChakraCore is an open source Javascript engine with a C API.

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2023-37139NVD↗	all versions	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
CVE-2023-37140NVD↗	all versions	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().
CVE-2023-37141NVD↗	all versions	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().
CVE-2023-37142NVD↗	all versions	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
CVE-2023-37143NVD↗	all versions	Jul 18, 2023Tuesday, 18 July 2023, 20:15	5.5 MEDIUM	—
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
CVE-2020-23315NVD↗	= 1.12.0.0	Jan 20, 2022Thursday, 20 January 2022, 22:15	7.5 HIGH	5 MEDIUM
There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.