diff --git a/advisories/github-reviewed/2024/12/GHSA-fwfx-rrv8-crpf/GHSA-fwfx-rrv8-crpf.json b/advisories/github-reviewed/2024/12/GHSA-fwfx-rrv8-crpf/GHSA-fwfx-rrv8-crpf.json new file mode 100644 index 00000000000..d5e9e98cda0 --- /dev/null +++ b/advisories/github-reviewed/2024/12/GHSA-fwfx-rrv8-crpf/GHSA-fwfx-rrv8-crpf.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fwfx-rrv8-crpf", + "modified": "2024-12-04T18:37:39Z", + "published": "2024-12-04T18:37:39Z", + "aliases": [], + "summary": "op_panic in the base runtime can force a panic in the runtime's containing thread", + "details": "Affected versions use deno_core releases that expose `Deno.core.ops.op_panic` to the JS runtime in the base core\n\nThis function when called triggers a manual panic in the thread containing the runtime.\n\nIt can be fixed by stubbing out the exposed op:\n```javascript\nDeno.core.ops.op_panic = (msg) => { throw new Error(msg) };\n```", + "severity": [], + "affected": [ + { + "package": { + "ecosystem": "crates.io", + "name": "rustyscript" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0.4.0" + }, + { + "fixed": "0.6.1" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/rscarson/rustyscript/issues/174" + }, + { + "type": "PACKAGE", + "url": "https://github.com/rscarson/rustyscripthttps://github.com/rscarson/rustyscript" + }, + { + "type": "WEB", + "url": "https://rustsec.org/advisories/RUSTSEC-2024-0405.html" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-12-04T18:37:39Z", + "nvd_published_at": null + } +} \ No newline at end of file