PT-2024-40075 · Deno · Deno
Published
2024-12-04
·
Updated
2024-12-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
Deno (affected versions not specified)
Description:
The issue arises from the exposure of
Deno.core.ops.op panic to the JS runtime in the base core, which can trigger a manual panic in the thread containing the runtime. This breaks sandboxing, posing a security risk.Recommendations:
For affected versions, stub out the exposed op by using the following code:
javascript
Deno.core.ops.op panic = (msg) => { throw new Error(msg) };At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Deno