CVE-2020-25465

HIGH 7.5CVE-2020-25465 · Published 04/12/2020 · updated 17/06/2026

In short

CVE-2020-25465 is a HIGH (CVSS 7.5) vulnerability affecting moddable (moddable).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
Fix: update to os200908 or later.

Package	Affected versions	Patched versions
moddable moddable	`< os200908`	`os200908`

Description

Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).

References

Moddable-OpenSource/moddable · Exploit
Moddable-OpenSource/moddable release OS200908 · Release Notes

More vulnerabilities in moddable

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moddable

< os200908

os200908

More vulnerabilities in moddable

See all →