JerryScript up to and including 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jerryscript jerryscript |