RUSTSEC-2024-0405

Source
https://rustsec.org/advisories/RUSTSEC-2024-0405
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0405.json
JSON Data
https://api.test.osv.dev/v1/vulns/RUSTSEC-2024-0405
Aliases
Published
2024-07-18T12:00:00Z
Modified
2025-10-28T06:29:51.791191Z
Summary
op_panic in the base runtime can force a panic in the runtime's containing thread
Details

Affected versions use deno_core releases that expose Deno.core.ops.op_panic to the JS runtime in the base core

This function when called triggers a manual panic in the thread containing the runtime.

It can be fixed by stubbing out the exposed op:

Deno.core.ops.op_panic = (msg) => { throw new Error(msg) };
Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / rustyscript

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.3.1-0
Fixed
0.6.1

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "os": [],
        "functions": []
    }
}

Database specific

cvss

null

categories

[
    "denial-of-service"
]

informational

null

source

"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0405.json"