Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-1001004

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3qh4-r86r-grvm

Arbitrary JavaScript Execution in typed-function Versions of `typed-function` prior to 0.10.6 are vulnerable to Arbitrary JavaScript Execution. Function names are not properly sanitized and may allow an attacker to execute arbitrary code. ## Recommendation Upgrade to version 0.10.6 or later.

gitlab/npm/typed-function/CVE-2017-1001004

Improper Input Validation typed-function has an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.