| Package | Affected versions | Patched versions |
|---|---|---|
| hermes | < 0.12.0 | 0.12.0 |
It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free