Skip to main content
cve.nowby Sazabi
← npm
npmPackage

hermes-engine

7 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7
Registry
npm

Advisories 7

  • By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes…

    Affected: fixed in 0.10.0.

  • A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows…

    Affected: fixed in 0.8.0.

  • An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows…

    Affected: fixed in 0.7.2.

  • A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit…

    Affected: fixed in 0.7.2.

  • An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6…

    Affected: fixed in 0.5.2.

  • An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit…

    Affected: fixed in 0.5.2.

  • A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes…

    Affected: fixed in 0.5.2.