crates.io boa_engine vulnerabilities

Latest crates.io boa_engine CVEs

Newest publication first

1. CVE-2024-43367 Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

   Published 2024-08-15

   High·CVSS 7.5 EPSS 0.60%

   Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's AsyncGenerator operations can cause an uncaught exception on certain scripts. Boa's implementation of...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.