-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rustyscript | rust | >= 0.4.0, < 0.6.1 | 0.6.1 |
RustRustMiggo AIRoot Cause AnalysisThe vulnerability stems from the exposure of op_panic through deno_core's FFI interface. The advisory explicitly identifies Deno.core.ops.op_panic as the vulnerable entry point that maps to a raw Rust panic in the host thread. While exact Rust implementation details aren't shown, the JavaScript exposure path and mitigation strategy confirm this is the vulnerable interface. The function's presence allows JS code to directly trigger thread termination via panic, violating sandboxing guarantees.
Ongoing coverage of React2Shell