GHSA-9p6p-8v9r-8c9m: javascript-deobfuscator crafted payload can lead to code execution

Skip to content

Navigation Menu

• • Actions

    Automate any workflow

  • Packages

    Host and manage packages

  • Security

    Find and fix vulnerabilities

  • Codespaces

    Instant dev environments

  • GitHub Copilot

    Write better code with AI

  • Code review

    Manage code changes

  • Issues

    Plan and track work

  • Discussions

    Collaborate outside of code

• • GitHub Sponsors

    Fund open source developers

*   The ReadME Project
    
    GitHub community articles

• • Enterprise platform

    AI-powered developer platform

• Pricing

Search code, repositories, users, issues, pull requests…

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2024-36120

javascript-deobfuscator crafted payload can lead to code execution

Package

npm js-deobfuscator (npm)

Affected versions

< 1.1.0

Description

Published to the GitHub Advisory Database

Jun 4, 2024

Severity

CVSS base metrics

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

GHSA ID

GHSA-9p6p-8v9r-8c9m

Source code