Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-36120

javascript-deobfuscator crafted payload can lead to code execution

Description

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the expression simplification feature.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ben-sb javascript-deobfuscator

  • < 1.1.0affected

References