-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit message explicitly identifies type confusion in JavascriptArray methods (join, indexOf, lastIndexOf, apply, map) through TemplatedGetItem usage. Diff changes show replacement with TryTemplatedGetItem to add validation. Encoder.cpp modifications adding CRC checks indicate prior missing memory integrity validation. GlobOpt.cpp fix reorders operations to prevent use-after-free. These match CWE-119 memory corruption patterns described in the vulnerability reports and are directly addressed in the security patches.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.1 | 1.2.1 |