RUSTSEC-2024-0405

Source
https://rustsec.org/advisories/RUSTSEC-2024-0405
Import Source
https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0405.json
JSON Data
https://api.osv.dev/v1/vulns/RUSTSEC-2024-0405
Aliases
Published
2024-07-18T12:00:00Z
Modified
2025-10-28T06:29:24.524094Z
Summary
op_panic in the base runtime can force a panic in the runtime's containing thread
Details

Affected versions use deno_core releases that expose Deno.core.ops.op_panic to the JS runtime in the base core

This function when called triggers a manual panic in the thread containing the runtime.

It can be fixed by stubbing out the exposed op:

Deno.core.ops.op_panic = (msg) => { throw new Error(msg) };
Database specific
{
    "license": "CC0-1.0"
}
References

Affected packages

crates.io / rustyscript

Package

Affected ranges

Type
SEMVER
Events
Introduced
0.3.1-0
Fixed
0.6.1

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}

Database specific

categories
[
    "denial-of-service"
]
informational
null
source
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0405.json"
cvss
null