fastly @fastly/js-compute vulnerabilities

Latest fastly @fastly/js-compute CVEs

Newest publication first

1. CVE-2024-38375 @fastly/js-compute use-after-free in some host call implementations

   Published 2024-06-26

   Medium·CVSS 5.3 EPSS 0.27%

   @fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent a...

2. CVE-2022-39218 Random number seed fixed during compilation

   Published 2022-09-20

   High·CVSS 7.5 EPSS 0.94%

   The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the Math.random and crypto.getRandomValues methods fail to use sufficiently random values. The init...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.