-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.0.0 | 1.2.0.0 |
Miggo AIRoot Cause AnalysisThe commit diff shows the vulnerability stemmed from unvalidated array indexing in propertyIdsForScopeSlotArray assignments. The original code used sym->GetScopeSlot() directly as an array index without bounds checks. The patch introduced a lambda (setPropertyIdForScopeSlotArray) to add validation. The CWE-119 classification and advisory descriptions confirm this was a memory corruption issue caused by improper bounds restrictions during bytecode emission.
C#C#Ongoing coverage of React2Shell