-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| js-sandbox | rust | <= 0.1.6 |
The vulnerability stems from the exposure of op_panic through Deno.core.ops in the JavaScript environment. This function maps directly to a Rust panic in the host runtime thread, violating sandbox security principles. While exact file paths aren't provided in advisory data, the consistent references to Deno.core.ops.op_panic across multiple sources and the explicit mitigation (stubbing in JS) confirm this as the vulnerable entry point. The confidence is high due to clear consensus across vulnerability descriptions and remediation guidance.
Ongoing coverage of React2Shell