MEDIUM
GHSA-fwfx-rrv8-crpf
op_panic in the base runtime can force a panic in the runtime's containing thread
Details
Affected versions use deno_core releases that expose `Deno.core.ops.op_panic` to the JS runtime in the base core
This function when called triggers a manual panic in the thread containing the runtime.
It can be fixed by stubbing out the exposed op: ```javascript Deno.core.ops.op_panic = (msg) => { throw new Error(msg) }; ```
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/rustyscript
Introduced in:
0.4.0Fixed in: 0.6.1Upgrade rustyscript to 0.6.1 or newer (ecosystem crates.io).