CVE-2023-39532

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-39532
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39532.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-39532
Aliases
Withdrawn
2024-09-03T04:41:30.219768Z
Published
2023-08-08T17:15:09Z
Modified
2024-09-02T01:19:03.337200Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to 0.17.1, 0.16.0 prior to 0.16.1, 0.15.0 prior to 0.15.24, 0.14.0 prior to 0.14.5, an 0.13.0 prior to 0.13.5, there is a hole in the confinement of guest applications under SES that may manifest as either the ability to exfiltrate information or execute arbitrary code depending on the configuration and implementation of the surrounding host.

Guest program running inside a Compartment with as few as no endowments can gain access to the surrounding host’s dynamic import by using dynamic import after the spread operator, like {...import(arbitraryModuleSpecifier)}.

On the web or in web extensions, a Content-Security-Policy following ordinary best practices likely mitigates both the risk of exfiltration and execution of arbitrary code, at least limiting the modules that the attacker can import to those that are already part of the application. However, without a Content-Security-Policy, dynamic import can be used to issue HTTP requests for either communication through the URL or for the execution of code reachable from that origin.

Within an XS worker, an attacker can use the host’s module system to the extent that the host has been configured. This typically only allows access to module code on the host’s file system and is of limited use to an attacker.

Within Node.js, the attacker gains access to Node.js’s module system. Importing the powerful builtins is not useful except insofar as there are side-effects and tempered because dynamic import returns a promise. Spreading a promise into an object renders the promises useless. However, Node.js allows importing data URLs, so this is a clear path to arbitrary execution.

Versions 0.18.7, 0.17.1, 0.16.1, 0.15.24, 0.14.5, and 0.13.5 contain a patch for this issue. Some workarounds are available. On the web, providing a suitably constrained Content-Security-Policy mitigates most of the threat. With XS, building a binary that lacks the ability to load modules at runtime mitigates the entirety of the threat. That will look like an implementation of fxFindModule in a file like xsPlatform.c that calls fxRejectModuleFile.

References

Affected packages

Git / github.com/endojs/endo

Affected ranges

Type
GIT
Repo
https://github.com/endojs/endo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

@endo/base64@0.*

@endo/base64@0.2.0
@endo/base64@0.2.1
@endo/base64@0.2.10
@endo/base64@0.2.11
@endo/base64@0.2.12
@endo/base64@0.2.13
@endo/base64@0.2.14
@endo/base64@0.2.15
@endo/base64@0.2.16
@endo/base64@0.2.17
@endo/base64@0.2.18
@endo/base64@0.2.19
@endo/base64@0.2.2
@endo/base64@0.2.20
@endo/base64@0.2.21
@endo/base64@0.2.22
@endo/base64@0.2.23
@endo/base64@0.2.24
@endo/base64@0.2.25
@endo/base64@0.2.26
@endo/base64@0.2.27
@endo/base64@0.2.28
@endo/base64@0.2.29
@endo/base64@0.2.3
@endo/base64@0.2.30
@endo/base64@0.2.31
@endo/base64@0.2.32
@endo/base64@0.2.4
@endo/base64@0.2.5
@endo/base64@0.2.6
@endo/base64@0.2.7
@endo/base64@0.2.8
@endo/base64@0.2.9

@endo/bundle-source@2.*

@endo/bundle-source@2.0.2
@endo/bundle-source@2.0.3
@endo/bundle-source@2.0.4
@endo/bundle-source@2.0.5
@endo/bundle-source@2.0.6
@endo/bundle-source@2.0.7
@endo/bundle-source@2.1.0
@endo/bundle-source@2.1.1
@endo/bundle-source@2.1.2
@endo/bundle-source@2.1.3
@endo/bundle-source@2.1.4
@endo/bundle-source@2.2.0
@endo/bundle-source@2.2.1
@endo/bundle-source@2.2.2
@endo/bundle-source@2.2.3
@endo/bundle-source@2.2.4
@endo/bundle-source@2.2.5
@endo/bundle-source@2.2.6
@endo/bundle-source@2.3.0
@endo/bundle-source@2.3.1
@endo/bundle-source@2.4.0
@endo/bundle-source@2.4.1
@endo/bundle-source@2.4.2
@endo/bundle-source@2.4.3
@endo/bundle-source@2.4.4
@endo/bundle-source@2.5.0
@endo/bundle-source@2.5.1
@endo/bundle-source@2.5.2

@endo/captp@1.*

@endo/captp@1.10.10
@endo/captp@1.10.11
@endo/captp@1.10.12
@endo/captp@1.10.9

@endo/captp@2.*

@endo/captp@2.0.0
@endo/captp@2.0.1
@endo/captp@2.0.10
@endo/captp@2.0.11
@endo/captp@2.0.12
@endo/captp@2.0.13
@endo/captp@2.0.14
@endo/captp@2.0.15
@endo/captp@2.0.16
@endo/captp@2.0.17
@endo/captp@2.0.18
@endo/captp@2.0.19
@endo/captp@2.0.2
@endo/captp@2.0.3
@endo/captp@2.0.4
@endo/captp@2.0.5
@endo/captp@2.0.6
@endo/captp@2.0.7
@endo/captp@2.0.8
@endo/captp@2.0.9

@endo/captp@3.*

@endo/captp@3.0.0
@endo/captp@3.1.0
@endo/captp@3.1.1
@endo/captp@3.1.2

@endo/check-bundle@0.*

@endo/check-bundle@0.1.1
@endo/check-bundle@0.1.2
@endo/check-bundle@0.2.0
@endo/check-bundle@0.2.1
@endo/check-bundle@0.2.10
@endo/check-bundle@0.2.11
@endo/check-bundle@0.2.12
@endo/check-bundle@0.2.13
@endo/check-bundle@0.2.14
@endo/check-bundle@0.2.15
@endo/check-bundle@0.2.16
@endo/check-bundle@0.2.17
@endo/check-bundle@0.2.18
@endo/check-bundle@0.2.19
@endo/check-bundle@0.2.2
@endo/check-bundle@0.2.3
@endo/check-bundle@0.2.4
@endo/check-bundle@0.2.5
@endo/check-bundle@0.2.6
@endo/check-bundle@0.2.7
@endo/check-bundle@0.2.8
@endo/check-bundle@0.2.9

@endo/cjs-module-analyzer@0.*

@endo/cjs-module-analyzer@0.2.0
@endo/cjs-module-analyzer@0.2.1
@endo/cjs-module-analyzer@0.2.10
@endo/cjs-module-analyzer@0.2.11
@endo/cjs-module-analyzer@0.2.12
@endo/cjs-module-analyzer@0.2.13
@endo/cjs-module-analyzer@0.2.14
@endo/cjs-module-analyzer@0.2.15
@endo/cjs-module-analyzer@0.2.16
@endo/cjs-module-analyzer@0.2.17
@endo/cjs-module-analyzer@0.2.18
@endo/cjs-module-analyzer@0.2.19
@endo/cjs-module-analyzer@0.2.2
@endo/cjs-module-analyzer@0.2.20
@endo/cjs-module-analyzer@0.2.21
@endo/cjs-module-analyzer@0.2.22
@endo/cjs-module-analyzer@0.2.23
@endo/cjs-module-analyzer@0.2.24
@endo/cjs-module-analyzer@0.2.25
@endo/cjs-module-analyzer@0.2.26
@endo/cjs-module-analyzer@0.2.27
@endo/cjs-module-analyzer@0.2.28
@endo/cjs-module-analyzer@0.2.29
@endo/cjs-module-analyzer@0.2.3
@endo/cjs-module-analyzer@0.2.30
@endo/cjs-module-analyzer@0.2.31
@endo/cjs-module-analyzer@0.2.32
@endo/cjs-module-analyzer@0.2.4
@endo/cjs-module-analyzer@0.2.5
@endo/cjs-module-analyzer@0.2.6
@endo/cjs-module-analyzer@0.2.7
@endo/cjs-module-analyzer@0.2.8
@endo/cjs-module-analyzer@0.2.9

@endo/cli@0.*

@endo/cli@0.1.1
@endo/cli@0.1.10
@endo/cli@0.1.11
@endo/cli@0.1.12
@endo/cli@0.1.13
@endo/cli@0.1.14
@endo/cli@0.1.15
@endo/cli@0.1.16
@endo/cli@0.1.17
@endo/cli@0.1.18
@endo/cli@0.1.19
@endo/cli@0.1.2
@endo/cli@0.1.20
@endo/cli@0.1.21
@endo/cli@0.1.22
@endo/cli@0.1.23
@endo/cli@0.1.24
@endo/cli@0.1.3
@endo/cli@0.1.4
@endo/cli@0.1.5
@endo/cli@0.1.6
@endo/cli@0.1.7
@endo/cli@0.1.8
@endo/cli@0.1.9
@endo/cli@0.2.0
@endo/cli@0.2.1
@endo/cli@0.2.2
@endo/cli@0.2.3

@endo/compartment-mapper@0.*

@endo/compartment-mapper@0.3.0
@endo/compartment-mapper@0.3.1
@endo/compartment-mapper@0.3.2
@endo/compartment-mapper@0.4.0
@endo/compartment-mapper@0.4.1
@endo/compartment-mapper@0.5.0
@endo/compartment-mapper@0.5.1
@endo/compartment-mapper@0.5.2
@endo/compartment-mapper@0.5.3
@endo/compartment-mapper@0.5.4
@endo/compartment-mapper@0.5.5
@endo/compartment-mapper@0.5.6
@endo/compartment-mapper@0.6.0
@endo/compartment-mapper@0.6.1
@endo/compartment-mapper@0.6.2
@endo/compartment-mapper@0.6.3
@endo/compartment-mapper@0.6.4
@endo/compartment-mapper@0.6.5
@endo/compartment-mapper@0.6.6
@endo/compartment-mapper@0.6.7
@endo/compartment-mapper@0.7.0
@endo/compartment-mapper@0.7.1
@endo/compartment-mapper@0.7.10
@endo/compartment-mapper@0.7.11
@endo/compartment-mapper@0.7.12
@endo/compartment-mapper@0.7.13
@endo/compartment-mapper@0.7.14
@endo/compartment-mapper@0.7.15
@endo/compartment-mapper@0.7.2
@endo/compartment-mapper@0.7.3
@endo/compartment-mapper@0.7.4
@endo/compartment-mapper@0.7.5
@endo/compartment-mapper@0.7.6
@endo/compartment-mapper@0.7.7
@endo/compartment-mapper@0.7.8
@endo/compartment-mapper@0.7.9
@endo/compartment-mapper@0.8.0
@endo/compartment-mapper@0.8.1
@endo/compartment-mapper@0.8.2
@endo/compartment-mapper@0.8.3
@endo/compartment-mapper@0.8.4
@endo/compartment-mapper@0.8.5

@endo/daemon@0.*

@endo/daemon@0.1.1
@endo/daemon@0.1.10
@endo/daemon@0.1.11
@endo/daemon@0.1.12
@endo/daemon@0.1.13
@endo/daemon@0.1.14
@endo/daemon@0.1.15
@endo/daemon@0.1.16
@endo/daemon@0.1.17
@endo/daemon@0.1.18
@endo/daemon@0.1.19
@endo/daemon@0.1.2
@endo/daemon@0.1.20
@endo/daemon@0.1.21
@endo/daemon@0.1.22
@endo/daemon@0.1.23
@endo/daemon@0.1.24
@endo/daemon@0.1.3
@endo/daemon@0.1.4
@endo/daemon@0.1.5
@endo/daemon@0.1.6
@endo/daemon@0.1.7
@endo/daemon@0.1.8
@endo/daemon@0.1.9
@endo/daemon@0.2.0
@endo/daemon@0.2.1
@endo/daemon@0.2.2
@endo/daemon@0.2.3

@endo/endo@0.*

@endo/endo@0.1.0
@endo/endo@0.1.1
@endo/endo@0.1.10
@endo/endo@0.1.11
@endo/endo@0.1.12
@endo/endo@0.1.13
@endo/endo@0.1.14
@endo/endo@0.1.15
@endo/endo@0.1.2
@endo/endo@0.1.3
@endo/endo@0.1.4
@endo/endo@0.1.5
@endo/endo@0.1.6
@endo/endo@0.1.7
@endo/endo@0.1.8
@endo/endo@0.1.9

@endo/env-options@0.*

@endo/env-options@0.1.1

@endo/eslint-config@0.*

@endo/eslint-config@0.3.10
@endo/eslint-config@0.3.11
@endo/eslint-config@0.3.12
@endo/eslint-config@0.3.13
@endo/eslint-config@0.3.14
@endo/eslint-config@0.3.15
@endo/eslint-config@0.3.16
@endo/eslint-config@0.3.17
@endo/eslint-config@0.3.18
@endo/eslint-config@0.3.19
@endo/eslint-config@0.3.20
@endo/eslint-config@0.3.21
@endo/eslint-config@0.3.7
@endo/eslint-config@0.3.8
@endo/eslint-config@0.3.9
@endo/eslint-config@0.4.0
@endo/eslint-config@0.4.1
@endo/eslint-config@0.4.10
@endo/eslint-config@0.4.2
@endo/eslint-config@0.4.3
@endo/eslint-config@0.4.4
@endo/eslint-config@0.4.5
@endo/eslint-config@0.4.6
@endo/eslint-config@0.4.7
@endo/eslint-config@0.4.8
@endo/eslint-config@0.4.9
@endo/eslint-config@0.5.0
@endo/eslint-config@0.5.1
@endo/eslint-config@0.5.2
@endo/eslint-config@0.5.3

@endo/eslint-plugin@0.*

@endo/eslint-plugin@0.3.10
@endo/eslint-plugin@0.3.11
@endo/eslint-plugin@0.3.12
@endo/eslint-plugin@0.3.13
@endo/eslint-plugin@0.3.14
@endo/eslint-plugin@0.3.15
@endo/eslint-plugin@0.3.16
@endo/eslint-plugin@0.3.17
@endo/eslint-plugin@0.3.18
@endo/eslint-plugin@0.3.19
@endo/eslint-plugin@0.3.20
@endo/eslint-plugin@0.3.21
@endo/eslint-plugin@0.3.22
@endo/eslint-plugin@0.3.23
@endo/eslint-plugin@0.3.24
@endo/eslint-plugin@0.3.25
@endo/eslint-plugin@0.3.26
@endo/eslint-plugin@0.3.27
@endo/eslint-plugin@0.3.28
@endo/eslint-plugin@0.3.3
@endo/eslint-plugin@0.3.4
@endo/eslint-plugin@0.3.5
@endo/eslint-plugin@0.3.6
@endo/eslint-plugin@0.3.7
@endo/eslint-plugin@0.3.8
@endo/eslint-plugin@0.3.9
@endo/eslint-plugin@0.4.0
@endo/eslint-plugin@0.4.1
@endo/eslint-plugin@0.4.2
@endo/eslint-plugin@0.4.3
@endo/eslint-plugin@0.4.4
@endo/eslint-plugin@0.4.5

@endo/eventual-send@0.*

@endo/eventual-send@0.14.1
@endo/eventual-send@0.14.2
@endo/eventual-send@0.14.3
@endo/eventual-send@0.14.4
@endo/eventual-send@0.14.5
@endo/eventual-send@0.14.6
@endo/eventual-send@0.14.7
@endo/eventual-send@0.14.8
@endo/eventual-send@0.15.0
@endo/eventual-send@0.15.1
@endo/eventual-send@0.15.2
@endo/eventual-send@0.15.3
@endo/eventual-send@0.15.4
@endo/eventual-send@0.15.5
@endo/eventual-send@0.16.0
@endo/eventual-send@0.16.1
@endo/eventual-send@0.16.2
@endo/eventual-send@0.16.3
@endo/eventual-send@0.16.4
@endo/eventual-send@0.16.5
@endo/eventual-send@0.16.6
@endo/eventual-send@0.16.7
@endo/eventual-send@0.16.8
@endo/eventual-send@0.16.9
@endo/eventual-send@0.17.0
@endo/eventual-send@0.17.1
@endo/eventual-send@0.17.2
@endo/eventual-send@0.17.3

@endo/exo@0.*

@endo/exo@0.2.0
@endo/exo@0.2.1
@endo/exo@0.2.2
@endo/exo@0.2.3

@endo/far@0.*

@endo/far@0.1.2
@endo/far@0.1.3
@endo/far@0.1.4
@endo/far@0.1.5
@endo/far@0.1.6
@endo/far@0.1.7
@endo/far@0.1.8
@endo/far@0.1.9
@endo/far@0.2.0
@endo/far@0.2.1
@endo/far@0.2.10
@endo/far@0.2.11
@endo/far@0.2.12
@endo/far@0.2.13
@endo/far@0.2.14
@endo/far@0.2.15
@endo/far@0.2.16
@endo/far@0.2.17
@endo/far@0.2.18
@endo/far@0.2.19
@endo/far@0.2.2
@endo/far@0.2.3
@endo/far@0.2.4
@endo/far@0.2.5
@endo/far@0.2.6
@endo/far@0.2.7
@endo/far@0.2.8
@endo/far@0.2.9

@endo/import-bundle@0.*

@endo/import-bundle@0.2.34
@endo/import-bundle@0.2.35
@endo/import-bundle@0.2.36
@endo/import-bundle@0.2.37
@endo/import-bundle@0.2.38
@endo/import-bundle@0.2.39
@endo/import-bundle@0.2.40
@endo/import-bundle@0.2.41
@endo/import-bundle@0.2.42
@endo/import-bundle@0.2.43
@endo/import-bundle@0.2.44
@endo/import-bundle@0.2.45
@endo/import-bundle@0.2.46
@endo/import-bundle@0.2.47
@endo/import-bundle@0.2.48
@endo/import-bundle@0.2.49
@endo/import-bundle@0.2.50
@endo/import-bundle@0.2.51
@endo/import-bundle@0.2.52
@endo/import-bundle@0.2.53
@endo/import-bundle@0.2.54
@endo/import-bundle@0.2.55
@endo/import-bundle@0.3.0
@endo/import-bundle@0.3.1
@endo/import-bundle@0.3.2
@endo/import-bundle@0.3.3
@endo/import-bundle@0.3.4
@endo/import-bundle@0.3.5

@endo/init@0.*

@endo/init@0.5.30
@endo/init@0.5.31
@endo/init@0.5.32
@endo/init@0.5.33
@endo/init@0.5.34
@endo/init@0.5.35
@endo/init@0.5.36
@endo/init@0.5.37
@endo/init@0.5.38
@endo/init@0.5.39
@endo/init@0.5.40
@endo/init@0.5.41
@endo/init@0.5.42
@endo/init@0.5.43
@endo/init@0.5.44
@endo/init@0.5.45
@endo/init@0.5.46
@endo/init@0.5.47
@endo/init@0.5.48
@endo/init@0.5.49
@endo/init@0.5.50
@endo/init@0.5.51
@endo/init@0.5.52
@endo/init@0.5.53
@endo/init@0.5.54
@endo/init@0.5.55
@endo/init@0.5.56
@endo/init@0.5.57

@endo/lockdown@0.*

@endo/lockdown@0.1.10
@endo/lockdown@0.1.11
@endo/lockdown@0.1.12
@endo/lockdown@0.1.13
@endo/lockdown@0.1.14
@endo/lockdown@0.1.15
@endo/lockdown@0.1.16
@endo/lockdown@0.1.17
@endo/lockdown@0.1.18
@endo/lockdown@0.1.19
@endo/lockdown@0.1.2
@endo/lockdown@0.1.20
@endo/lockdown@0.1.21
@endo/lockdown@0.1.22
@endo/lockdown@0.1.23
@endo/lockdown@0.1.24
@endo/lockdown@0.1.25
@endo/lockdown@0.1.26
@endo/lockdown@0.1.27
@endo/lockdown@0.1.28
@endo/lockdown@0.1.29
@endo/lockdown@0.1.3
@endo/lockdown@0.1.4
@endo/lockdown@0.1.5
@endo/lockdown@0.1.6
@endo/lockdown@0.1.7
@endo/lockdown@0.1.8
@endo/lockdown@0.1.9

@endo/lp32@0.*

@endo/lp32@0.3.0
@endo/lp32@0.3.1
@endo/lp32@0.3.10
@endo/lp32@0.3.11
@endo/lp32@0.3.12
@endo/lp32@0.3.13
@endo/lp32@0.3.14
@endo/lp32@0.3.15
@endo/lp32@0.3.16
@endo/lp32@0.3.17
@endo/lp32@0.3.18
@endo/lp32@0.3.19
@endo/lp32@0.3.2
@endo/lp32@0.3.20
@endo/lp32@0.3.21
@endo/lp32@0.3.22
@endo/lp32@0.3.23
@endo/lp32@0.3.24
@endo/lp32@0.3.25
@endo/lp32@0.3.26
@endo/lp32@0.3.27
@endo/lp32@0.3.3
@endo/lp32@0.3.4
@endo/lp32@0.3.5
@endo/lp32@0.3.6
@endo/lp32@0.3.7
@endo/lp32@0.3.8
@endo/lp32@0.3.9

@endo/marshal@0.*

@endo/marshal@0.5.1
@endo/marshal@0.5.2
@endo/marshal@0.5.3
@endo/marshal@0.5.4
@endo/marshal@0.6.0
@endo/marshal@0.6.1
@endo/marshal@0.6.2
@endo/marshal@0.6.3
@endo/marshal@0.6.4
@endo/marshal@0.6.5
@endo/marshal@0.6.6
@endo/marshal@0.6.7
@endo/marshal@0.6.8
@endo/marshal@0.6.9
@endo/marshal@0.7.0
@endo/marshal@0.7.1
@endo/marshal@0.7.2
@endo/marshal@0.7.3
@endo/marshal@0.7.4
@endo/marshal@0.7.5
@endo/marshal@0.7.6
@endo/marshal@0.8.0
@endo/marshal@0.8.1
@endo/marshal@0.8.2
@endo/marshal@0.8.3
@endo/marshal@0.8.4
@endo/marshal@0.8.5
@endo/marshal@0.8.6

@endo/memoize@0.*

@endo/memoize@0.1.1

@endo/nat@4.*

@endo/nat@4.1.1
@endo/nat@4.1.10
@endo/nat@4.1.11
@endo/nat@4.1.12
@endo/nat@4.1.13
@endo/nat@4.1.14
@endo/nat@4.1.15
@endo/nat@4.1.16
@endo/nat@4.1.17
@endo/nat@4.1.18
@endo/nat@4.1.19
@endo/nat@4.1.2
@endo/nat@4.1.20
@endo/nat@4.1.21
@endo/nat@4.1.22
@endo/nat@4.1.23
@endo/nat@4.1.24
@endo/nat@4.1.25
@endo/nat@4.1.26
@endo/nat@4.1.27
@endo/nat@4.1.28
@endo/nat@4.1.3
@endo/nat@4.1.4
@endo/nat@4.1.5
@endo/nat@4.1.6
@endo/nat@4.1.7
@endo/nat@4.1.8
@endo/nat@4.1.9

@endo/netstring@0.*

@endo/netstring@0.2.0
@endo/netstring@0.2.1
@endo/netstring@0.2.10
@endo/netstring@0.2.11
@endo/netstring@0.2.12
@endo/netstring@0.2.13
@endo/netstring@0.2.2
@endo/netstring@0.2.3
@endo/netstring@0.2.4
@endo/netstring@0.2.5
@endo/netstring@0.2.6
@endo/netstring@0.2.7
@endo/netstring@0.2.8
@endo/netstring@0.2.9
@endo/netstring@0.3.0
@endo/netstring@0.3.1
@endo/netstring@0.3.10
@endo/netstring@0.3.11
@endo/netstring@0.3.12
@endo/netstring@0.3.13
@endo/netstring@0.3.14
@endo/netstring@0.3.15
@endo/netstring@0.3.16
@endo/netstring@0.3.17
@endo/netstring@0.3.18
@endo/netstring@0.3.19
@endo/netstring@0.3.2
@endo/netstring@0.3.20
@endo/netstring@0.3.21
@endo/netstring@0.3.22
@endo/netstring@0.3.23
@endo/netstring@0.3.24
@endo/netstring@0.3.25
@endo/netstring@0.3.26
@endo/netstring@0.3.27
@endo/netstring@0.3.3
@endo/netstring@0.3.4
@endo/netstring@0.3.5
@endo/netstring@0.3.6
@endo/netstring@0.3.7
@endo/netstring@0.3.8
@endo/netstring@0.3.9

@endo/pass-style@0.*

@endo/pass-style@0.1.1
@endo/pass-style@0.1.2
@endo/pass-style@0.1.3
@endo/pass-style@0.1.4

@endo/patterns@0.*

@endo/patterns@0.2.0
@endo/patterns@0.2.1
@endo/patterns@0.2.2
@endo/patterns@0.2.3

@endo/promise-kit@0.*

@endo/promise-kit@0.2.30
@endo/promise-kit@0.2.31
@endo/promise-kit@0.2.32
@endo/promise-kit@0.2.33
@endo/promise-kit@0.2.34
@endo/promise-kit@0.2.35
@endo/promise-kit@0.2.36
@endo/promise-kit@0.2.37
@endo/promise-kit@0.2.38
@endo/promise-kit@0.2.39
@endo/promise-kit@0.2.40
@endo/promise-kit@0.2.41
@endo/promise-kit@0.2.42
@endo/promise-kit@0.2.43
@endo/promise-kit@0.2.44
@endo/promise-kit@0.2.45
@endo/promise-kit@0.2.46
@endo/promise-kit@0.2.47
@endo/promise-kit@0.2.48
@endo/promise-kit@0.2.49
@endo/promise-kit@0.2.50
@endo/promise-kit@0.2.51
@endo/promise-kit@0.2.52
@endo/promise-kit@0.2.53
@endo/promise-kit@0.2.54
@endo/promise-kit@0.2.55
@endo/promise-kit@0.2.56
@endo/promise-kit@0.2.57

@endo/ses-ava@0.*

@endo/ses-ava@0.2.0
@endo/ses-ava@0.2.1
@endo/ses-ava@0.2.10
@endo/ses-ava@0.2.11
@endo/ses-ava@0.2.12
@endo/ses-ava@0.2.13
@endo/ses-ava@0.2.14
@endo/ses-ava@0.2.15
@endo/ses-ava@0.2.16
@endo/ses-ava@0.2.17
@endo/ses-ava@0.2.18
@endo/ses-ava@0.2.19
@endo/ses-ava@0.2.2
@endo/ses-ava@0.2.20
@endo/ses-ava@0.2.21
@endo/ses-ava@0.2.22
@endo/ses-ava@0.2.23
@endo/ses-ava@0.2.24
@endo/ses-ava@0.2.25
@endo/ses-ava@0.2.26
@endo/ses-ava@0.2.27
@endo/ses-ava@0.2.28
@endo/ses-ava@0.2.29
@endo/ses-ava@0.2.3
@endo/ses-ava@0.2.30
@endo/ses-ava@0.2.31
@endo/ses-ava@0.2.32
@endo/ses-ava@0.2.33
@endo/ses-ava@0.2.34
@endo/ses-ava@0.2.35
@endo/ses-ava@0.2.36
@endo/ses-ava@0.2.37
@endo/ses-ava@0.2.38
@endo/ses-ava@0.2.39
@endo/ses-ava@0.2.4
@endo/ses-ava@0.2.40
@endo/ses-ava@0.2.41
@endo/ses-ava@0.2.5
@endo/ses-ava@0.2.6
@endo/ses-ava@0.2.7
@endo/ses-ava@0.2.8
@endo/ses-ava@0.2.9

@endo/ses-types-test@0.*

@endo/ses-types-test@0.1.1
@endo/ses-types-test@0.1.10
@endo/ses-types-test@0.1.11
@endo/ses-types-test@0.1.12
@endo/ses-types-test@0.1.13
@endo/ses-types-test@0.1.14
@endo/ses-types-test@0.1.15
@endo/ses-types-test@0.1.16
@endo/ses-types-test@0.1.17
@endo/ses-types-test@0.1.18
@endo/ses-types-test@0.1.2
@endo/ses-types-test@0.1.3
@endo/ses-types-test@0.1.4
@endo/ses-types-test@0.1.5
@endo/ses-types-test@0.1.6
@endo/ses-types-test@0.1.7
@endo/ses-types-test@0.1.8
@endo/ses-types-test@0.1.9

@endo/static-module-record@0.*

@endo/static-module-record@0.5.0
@endo/static-module-record@0.5.1
@endo/static-module-record@0.5.2
@endo/static-module-record@0.5.3
@endo/static-module-record@0.5.4
@endo/static-module-record@0.6.0
@endo/static-module-record@0.6.1
@endo/static-module-record@0.6.10
@endo/static-module-record@0.6.11
@endo/static-module-record@0.6.12
@endo/static-module-record@0.6.13
@endo/static-module-record@0.6.14
@endo/static-module-record@0.6.15
@endo/static-module-record@0.6.2
@endo/static-module-record@0.6.3
@endo/static-module-record@0.6.4
@endo/static-module-record@0.6.5
@endo/static-module-record@0.6.6
@endo/static-module-record@0.6.7
@endo/static-module-record@0.6.8
@endo/static-module-record@0.6.9
@endo/static-module-record@0.7.0
@endo/static-module-record@0.7.1
@endo/static-module-record@0.7.10
@endo/static-module-record@0.7.11
@endo/static-module-record@0.7.12
@endo/static-module-record@0.7.13
@endo/static-module-record@0.7.14
@endo/static-module-record@0.7.15
@endo/static-module-record@0.7.16
@endo/static-module-record@0.7.17
@endo/static-module-record@0.7.18
@endo/static-module-record@0.7.19
@endo/static-module-record@0.7.2
@endo/static-module-record@0.7.20
@endo/static-module-record@0.7.3
@endo/static-module-record@0.7.4
@endo/static-module-record@0.7.5
@endo/static-module-record@0.7.6
@endo/static-module-record@0.7.7
@endo/static-module-record@0.7.8
@endo/static-module-record@0.7.9

@endo/stream-node@0.*

@endo/stream-node@0.2.0
@endo/stream-node@0.2.1
@endo/stream-node@0.2.10
@endo/stream-node@0.2.11
@endo/stream-node@0.2.12
@endo/stream-node@0.2.13
@endo/stream-node@0.2.14
@endo/stream-node@0.2.15
@endo/stream-node@0.2.16
@endo/stream-node@0.2.17
@endo/stream-node@0.2.18
@endo/stream-node@0.2.19
@endo/stream-node@0.2.2
@endo/stream-node@0.2.20
@endo/stream-node@0.2.21
@endo/stream-node@0.2.22
@endo/stream-node@0.2.23
@endo/stream-node@0.2.24
@endo/stream-node@0.2.25
@endo/stream-node@0.2.26
@endo/stream-node@0.2.27
@endo/stream-node@0.2.3
@endo/stream-node@0.2.4
@endo/stream-node@0.2.5
@endo/stream-node@0.2.6
@endo/stream-node@0.2.7
@endo/stream-node@0.2.8
@endo/stream-node@0.2.9

@endo/stream-types-test@0.*

@endo/stream-types-test@0.1.11
@endo/stream-types-test@0.1.12
@endo/stream-types-test@0.1.13
@endo/stream-types-test@0.1.14
@endo/stream-types-test@0.1.15
@endo/stream-types-test@0.1.16
@endo/stream-types-test@0.1.17
@endo/stream-types-test@0.1.18
@endo/stream-types-test@0.1.19
@endo/stream-types-test@0.1.20
@endo/stream-types-test@0.1.21
@endo/stream-types-test@0.1.22
@endo/stream-types-test@0.1.23
@endo/stream-types-test@0.1.24
@endo/stream-types-test@0.1.25
@endo/stream-types-test@0.1.26
@endo/stream-types-test@0.1.27
@endo/stream-types-test@0.1.28
@endo/stream-types-test@0.1.29
@endo/stream-types-test@0.1.30
@endo/stream-types-test@0.1.31
@endo/stream-types-test@0.1.32
@endo/stream-types-test@0.1.33
@endo/stream-types-test@0.1.34
@endo/stream-types-test@0.1.35
@endo/stream-types-test@0.1.36
@endo/stream-types-test@0.1.37
@endo/stream-types-test@0.1.38

@endo/stream@0.*

@endo/stream@0.2.0
@endo/stream@0.3.0
@endo/stream@0.3.1
@endo/stream@0.3.10
@endo/stream@0.3.11
@endo/stream@0.3.12
@endo/stream@0.3.13
@endo/stream@0.3.14
@endo/stream@0.3.15
@endo/stream@0.3.16
@endo/stream@0.3.17
@endo/stream@0.3.18
@endo/stream@0.3.19
@endo/stream@0.3.2
@endo/stream@0.3.20
@endo/stream@0.3.21
@endo/stream@0.3.22
@endo/stream@0.3.23
@endo/stream@0.3.24
@endo/stream@0.3.25
@endo/stream@0.3.26
@endo/stream@0.3.3
@endo/stream@0.3.4
@endo/stream@0.3.5
@endo/stream@0.3.6
@endo/stream@0.3.7
@endo/stream@0.3.8
@endo/stream@0.3.9

@endo/syrup@0.*

@endo/syrup@0.1.0
@endo/syrup@0.1.1
@endo/syrup@0.1.10
@endo/syrup@0.1.11
@endo/syrup@0.1.12
@endo/syrup@0.1.13
@endo/syrup@0.1.14
@endo/syrup@0.1.15
@endo/syrup@0.1.16
@endo/syrup@0.1.17
@endo/syrup@0.1.18
@endo/syrup@0.1.19
@endo/syrup@0.1.2
@endo/syrup@0.1.20
@endo/syrup@0.1.21
@endo/syrup@0.1.22
@endo/syrup@0.1.23
@endo/syrup@0.1.24
@endo/syrup@0.1.25
@endo/syrup@0.1.26
@endo/syrup@0.1.27
@endo/syrup@0.1.28
@endo/syrup@0.1.29
@endo/syrup@0.1.3
@endo/syrup@0.1.30
@endo/syrup@0.1.31
@endo/syrup@0.1.32
@endo/syrup@0.1.4
@endo/syrup@0.1.5
@endo/syrup@0.1.6
@endo/syrup@0.1.7
@endo/syrup@0.1.8
@endo/syrup@0.1.9

@endo/test262-runner@0.*

@endo/test262-runner@0.1.1
@endo/test262-runner@0.1.10
@endo/test262-runner@0.1.11
@endo/test262-runner@0.1.12
@endo/test262-runner@0.1.13
@endo/test262-runner@0.1.14
@endo/test262-runner@0.1.15
@endo/test262-runner@0.1.16
@endo/test262-runner@0.1.17
@endo/test262-runner@0.1.18
@endo/test262-runner@0.1.19
@endo/test262-runner@0.1.2
@endo/test262-runner@0.1.20
@endo/test262-runner@0.1.21
@endo/test262-runner@0.1.22
@endo/test262-runner@0.1.23
@endo/test262-runner@0.1.24
@endo/test262-runner@0.1.25
@endo/test262-runner@0.1.26
@endo/test262-runner@0.1.27
@endo/test262-runner@0.1.28
@endo/test262-runner@0.1.29
@endo/test262-runner@0.1.3
@endo/test262-runner@0.1.30
@endo/test262-runner@0.1.31
@endo/test262-runner@0.1.32
@endo/test262-runner@0.1.4
@endo/test262-runner@0.1.5
@endo/test262-runner@0.1.6
@endo/test262-runner@0.1.7
@endo/test262-runner@0.1.8
@endo/test262-runner@0.1.9

@endo/where@0.*

@endo/where@0.1.1
@endo/where@0.1.2
@endo/where@0.1.3
@endo/where@0.1.4
@endo/where@0.2.0
@endo/where@0.2.1
@endo/where@0.2.10
@endo/where@0.2.11
@endo/where@0.2.2
@endo/where@0.2.3
@endo/where@0.2.4
@endo/where@0.2.5
@endo/where@0.2.6
@endo/where@0.2.7
@endo/where@0.2.8
@endo/where@0.2.9
@endo/where@0.3.0
@endo/where@0.3.1
@endo/where@0.3.2

@endo/zip@0.*

@endo/zip@0.2.0
@endo/zip@0.2.1
@endo/zip@0.2.10
@endo/zip@0.2.11
@endo/zip@0.2.12
@endo/zip@0.2.13
@endo/zip@0.2.14
@endo/zip@0.2.15
@endo/zip@0.2.16
@endo/zip@0.2.17
@endo/zip@0.2.18
@endo/zip@0.2.19
@endo/zip@0.2.2
@endo/zip@0.2.20
@endo/zip@0.2.21
@endo/zip@0.2.22
@endo/zip@0.2.23
@endo/zip@0.2.24
@endo/zip@0.2.25
@endo/zip@0.2.26
@endo/zip@0.2.27
@endo/zip@0.2.28
@endo/zip@0.2.29
@endo/zip@0.2.3
@endo/zip@0.2.30
@endo/zip@0.2.31
@endo/zip@0.2.32
@endo/zip@0.2.4
@endo/zip@0.2.5
@endo/zip@0.2.6
@endo/zip@0.2.7
@endo/zip@0.2.8
@endo/zip@0.2.9

SES-v0.*

SES-v0.0.1
SES-v0.1.0
SES-v0.1.1
SES-v0.1.2
SES-v0.1.3
SES-v0.10.0
SES-v0.10.1
SES-v0.10.2
SES-v0.10.3
SES-v0.10.4
SES-v0.11.0
SES-v0.11.1
SES-v0.12.3
SES-v0.12.4
SES-v0.2.0
SES-v0.3.0
SES-v0.4.0
SES-v0.5.0
SES-v0.5.1
SES-v0.5.2
SES-v0.5.3
SES-v0.6.0
SES-v0.6.1
SES-v0.6.2
SES-v0.6.3
SES-v0.6.4
SES-v0.7.0
SES-v0.7.1
SES-v0.7.2
SES-v0.7.3
SES-v0.7.4
SES-v0.7.5
SES-v0.7.6
SES-v0.7.7
SES-v0.8.0
SES-v0.9.0
SES-v0.9.1

compartment-mapper-v0.*

compartment-mapper-v0.1.0
compartment-mapper-v0.2.0
compartment-mapper-v0.2.1
compartment-mapper-v0.2.3

evaluate-v1.*

evaluate-v1.0.0
evaluate-v1.1.0
evaluate-v1.3.0
evaluate-v1.3.1
evaluate-v1.3.2

evaluate-v2.*

evaluate-v2.0.0
evaluate-v2.1.0
evaluate-v2.1.1
evaluate-v2.1.2
evaluate-v2.1.3

evaluator-shim-v1.*

evaluator-shim-v1.1.0

harden-v0.*

harden-v0.0.1
harden-v0.0.2
harden-v0.0.3
harden-v0.0.4
harden-v0.0.5
harden-v0.0.6
harden-v0.0.7
harden-v0.0.8
harden-v0.1.0
harden-v0.2.0

make-hardener-v0.*

make-hardener-v0.0.2
make-hardener-v0.0.3
make-hardener-v0.0.4
make-hardener-v0.0.5
make-hardener-v0.0.6
make-hardener-v0.0.7
make-hardener-v0.0.9
make-hardener-v0.1.0
make-hardener-v0.1.2

make-importer-v0.*

make-importer-v0.0.2

ses-ava-v0.*

ses-ava-v0.1.0

ses-integration-test@2.*

ses-integration-test@2.0.0
ses-integration-test@2.0.1
ses-integration-test@2.0.2
ses-integration-test@2.0.3
ses-integration-test@2.0.4
ses-integration-test@2.0.5
ses-integration-test@2.0.6
ses-integration-test@2.0.7
ses-integration-test@2.0.8
ses-integration-test@2.0.9

ses-integration-test@3.*

ses-integration-test@3.0.0
ses-integration-test@3.0.1
ses-integration-test@3.0.10
ses-integration-test@3.0.11
ses-integration-test@3.0.12
ses-integration-test@3.0.13
ses-integration-test@3.0.14
ses-integration-test@3.0.15
ses-integration-test@3.0.16
ses-integration-test@3.0.17
ses-integration-test@3.0.18
ses-integration-test@3.0.19
ses-integration-test@3.0.2
ses-integration-test@3.0.20
ses-integration-test@3.0.21
ses-integration-test@3.0.22
ses-integration-test@3.0.23
ses-integration-test@3.0.24
ses-integration-test@3.0.25
ses-integration-test@3.0.26
ses-integration-test@3.0.27
ses-integration-test@3.0.28
ses-integration-test@3.0.29
ses-integration-test@3.0.3
ses-integration-test@3.0.30
ses-integration-test@3.0.31
ses-integration-test@3.0.4
ses-integration-test@3.0.5
ses-integration-test@3.0.6
ses-integration-test@3.0.7
ses-integration-test@3.0.8
ses-integration-test@3.0.9

ses-v0.*

ses-v0.12.1
ses-v0.12.2
ses-v0.12.5

ses@0.*

ses@0.13.0
ses@0.13.1
ses@0.13.2
ses@0.13.3
ses@0.13.4
ses@0.14.0
ses@0.14.1
ses@0.14.2
ses@0.14.3
ses@0.14.4
ses@0.15.0
ses@0.15.1
ses@0.15.10
ses@0.15.11
ses@0.15.12
ses@0.15.13
ses@0.15.14
ses@0.15.15
ses@0.15.16
ses@0.15.17
ses@0.15.18
ses@0.15.19
ses@0.15.2
ses@0.15.20
ses@0.15.21
ses@0.15.22
ses@0.15.23
ses@0.15.3
ses@0.15.4
ses@0.15.5
ses@0.15.6
ses@0.15.7
ses@0.15.8
ses@0.15.9
ses@0.16.0
ses@0.17.0
ses@0.18.0
ses@0.18.1
ses@0.18.2
ses@0.18.3
ses@0.18.4
ses@0.18.5

transform-module-v0.*

transform-module-v0.0.2
transform-module-v0.1.0
transform-module-v0.1.10
transform-module-v0.1.11
transform-module-v0.1.12
transform-module-v0.1.13
transform-module-v0.1.14
transform-module-v0.1.15
transform-module-v0.1.16
transform-module-v0.1.17
transform-module-v0.1.18
transform-module-v0.1.19
transform-module-v0.1.2
transform-module-v0.1.20
transform-module-v0.1.3
transform-module-v0.1.4
transform-module-v0.1.5
transform-module-v0.1.6
transform-module-v0.1.7
transform-module-v0.1.8
transform-module-v0.1.9
transform-module-v0.2.0
transform-module-v0.2.1
transform-module-v0.2.2
transform-module-v0.3.0
transform-module-v0.4.0
transform-module-v0.4.1