Boa vulnerabilities
We track 2 vulnerabilities in Boa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2024.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Boa vulnerabilities
- 7.5 High severity
boa: Uncaught Exception
Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's `AsyncGenerator` operations can cause an uncaught exception on certain scripts. Bo
- 9.8 Critical severity
Boa: Improper Neutralization of Special Elements used in an SQL Command
Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with any support for SQL.