-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit diff and advisory details explicitly show fixes for type confusion and heap overflow vulnerabilities in array methods (filter, splice, concat) and eval handling. Key issues included: 1) Missing native-to-Var array conversions in JSON parsing and prototype traversal, 2) Improper flag checks in eval argument handling, and 3) Unsafe length caching in ArraySpeciesCreate. The patched functions directly correspond to these vulnerabilities, with high confidence due to explicit CVE attribution in commit messages and test cases validating the fixes.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.2 | 1.2.2 |