GHSA-jhx3-2w5x-x39x
GitHub Security Advisory
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.
Affected Packages
NuGet
Microsoft.ChakraCore
Affected versions:
0
(fixed in 1.11.7)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 28, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.