GHSA-fwfx-rrv8-crpf

Suggest an improvement
Source
https://github.com/advisories/GHSA-fwfx-rrv8-crpf
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-fwfx-rrv8-crpf/GHSA-fwfx-rrv8-crpf.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-fwfx-rrv8-crpf
Aliases
Published
2024-12-04T18:37:39Z
Modified
2025-10-28T06:29:24Z
Summary
op_panic in the base runtime can force a panic in the runtime's containing thread
Details

Affected versions use deno_core releases that expose Deno.core.ops.op_panic to the JS runtime in the base core

This function when called triggers a manual panic in the thread containing the runtime.

It can be fixed by stubbing out the exposed op:

Deno.core.ops.op_panic = (msg) => { throw new Error(msg) };
Database specific 
{
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2024-12-04T18:37:39Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
}
References

Affected packages

crates.io / rustyscript

Package

Name
rustyscript
View open source insights on deps.dev
Purl
pkg:cargo/rustyscript

Affected ranges

Type
SEMVER
Events
Introduced
0.4.0
Fixed
0.6.1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-fwfx-rrv8-crpf/GHSA-fwfx-rrv8-crpf.json"