rhino vulnerabilities

1 known vulnerability in rhino from Mozilla. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  rhino: Uncontrolled Resource Consumption

  CVE-2025-66453Dec 3, 2025Mozilla

  Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a