← Back

Metarhia

metarhia

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Metacalc
metacalc

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Metarhia
1Metacalc
Nov 21, 2024
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScrip...Show more
The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor.Show less