javascript-deobfuscator crafted payload can lead to code execution
High severity
GitHub Reviewed
Published
May 31, 2024
in
ben-sb/javascript-deobfuscator
•
Updated Jun 4, 2024
Description
Published by the National Vulnerability Database
May 31, 2024
Published to the GitHub Advisory Database
Jun 4, 2024
Reviewed
Jun 4, 2024
Last updated
Jun 4, 2024
javascript-deobfuscator removes common JavaScript obfuscation techniques. Crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0.
References