The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| uglify-js(npm) | 0 | 2.4.24 | N/A |
| uglifier(RubyGems) | 0 | 2.7.2 | N/A |
CVSS Metrics
