-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability was addressed by replacing platform.Map with a custom IntlCache that enforces size limits (PR #6385/commit 7e2c360). The key issue was improper memory buffer management in locale handling - the Map-based cache lacked eviction logic, creating potential for memory corruption through uncontrolled growth. The CWE-119 classification and RCE impact suggest this cache management flaw was the attack surface for memory corruption.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.17 | 1.11.17 |
C#C#Ongoing coverage of React2Shell