endo vulnerabilities

2 known vulnerabilities in endo from Endojs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  endo: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2025-32792Apr 18, 2025Endojs

  SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using `ses` and the Compartment API to evaluate third-party code in an

• 9.8 Critical severity

  SES is a JavaScript environment that allows safe execution of arbitrary programs in…

  CVE-2023-39532Aug 8, 2023EndojsEPSS 1.35%

  SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to 0.17.1, 0.16.0 prior to 0.16.1, 0.15.0 prior to 0.15.24, 0.14.0 prior to 0.14.5, an 0.13.0 prior to 0.13.5, the