MEDIUM
GHSA-4mw5-2636-4535
op_panic in the base runtime can force a panic in the runtime's containing thread
Details
Affected versions use deno_core releases that expose `Deno.core.ops.op_panic` to the JS runtime in the base core
This function when called triggers a manual panic in the thread containing the runtime, breaking sandboxing
It can be fixed by stubbing out the exposed op: ```javascript Deno.core.ops.op_panic = (msg) => { throw new Error(msg) }; ```
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/js-sandbox
Introduced in:
0No fixed version published yet for js-sandbox. Pin to a known-safe version or switch to an alternative.