{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45388?format=json","vulnerability_id":"VCID-ucve-wqaq-5yd1","summary":"Reachable Assertion\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.","aliases":[{"alias":"CVE-2023-34867"}],"fixed_packages":[],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60201?format=json","purl":"pkg:conan/jerryscript@3.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dmn-erdq-43gv"},{"vulnerability":"VCID-1h9u-ym8m-jbav"},{"vulnerability":"VCID-27cg-rjmx-pqb4"},{"vulnerability":"VCID-2prq-dcy2-8khr"},{"vulnerability":"VCID-2xq3-mq8n-fkfc"},{"vulnerability":"VCID-3y3s-cktx-a7fy"},{"vulnerability":"VCID-55gv-vq2s-33g9"},{"vulnerability":"VCID-6z4b-cv6b-tqgy"},{"vulnerability":"VCID-75m8-ty1f-qbfy"},{"vulnerability":"VCID-96gz-7p7d-kye6"},{"vulnerability":"VCID-9mgp-bp1a-a7d4"},{"vulnerability":"VCID-agbb-mdrb-j3du"},{"vulnerability":"VCID-bhk2-uvwq-qqa5"},{"vulnerability":"VCID-caxw-hx6n-dqed"},{"vulnerability":"VCID-cyff-fter-jyfe"},{"vulnerability":"VCID-e6pp-ehvp-v3fs"},{"vulnerability":"VCID-eeup-qx6t-puh9"},{"vulnerability":"VCID-enra-h154-hyhu"},{"vulnerability":"VCID-h53g-vkxw-5fgy"},{"vulnerability":"VCID-m9wh-1w5u-p7a1"},{"vulnerability":"VCID-mscu-ujzn-cyfv"},{"vulnerability":"VCID-my7c-dmwn-ruck"},{"vulnerability":"VCID-nzxx-wpdu-53dv"},{"vulnerability":"VCID-pk9x-w83a-pbf7"},{"vulnerability":"VCID-pkt4-nu1n-77cg"},{"vulnerability":"VCID-pr6g-yv9y-byhf"},{"vulnerability":"VCID-u4va-nsrk-pkgr"},{"vulnerability":"VCID-ucve-wqaq-5yd1"},{"vulnerability":"VCID-uefz-v5rg-8bgx"},{"vulnerability":"VCID-ueya-bx43-73hf"},{"vulnerability":"VCID-uye6-f6w4-wqb3"},{"vulnerability":"VCID-uzvh-qmgc-juf7"},{"vulnerability":"VCID-wjwq-qn34-1qd2"},{"vulnerability":"VCID-xv39-kbyz-7feu"},{"vulnerability":"VCID-y6qb-5zby-a3cp"},{"vulnerability":"VCID-ycvt-ak76-duge"},{"vulnerability":"VCID-zbqb-uwgx-nffg"},{"vulnerability":"VCID-ze5f-j4ny-8ueh"},{"vulnerability":"VCID-zm48-kdxj-mub9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:conan/jerryscript@3.0.0"}],"references":[{"reference_url":"https://github.com/jerryscript-project/jerryscript/issues/5084","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/jerryscript-project/jerryscript/issues/5084"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34867","reference_id":"CVE-2023-34867","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34867"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":617,"name":"Reachable Assertion","description":"The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ucve-wqaq-5yd1"}