Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.ChakraCore@1.11.23
purl pkg:nuget/Microsoft.ChakraCore@1.11.23
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-qwwg-gc55-qqrv
Aliases:
CVE-2020-17131
Out-of-bounds Write in Chakra Chakra Scripting Engine Memory Corruption Vulnerability
1.11.24
Vulnerable
GHSA-jgrp-6qqq-3284
Aliases:
CVE-2021-42279
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due … There are no reported fixed by versions.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-88cw-3m6x-49f7
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17048. CVE-2020-17054
GHSA-vpc2-7xmf-ppmf
Out-of-bounds Write in ChakraCore Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID is unique from CVE-2020-17054. CVE-2020-17048
CVE-2020-17054
Improper Restriction of Operations within the Bounds of a Memory Buffer Chakra Scripting Engine Memory Corruption Vulnerability This CVE ID …