Skip to content
Sign in
5.3 Medium

CVE-2024-38375 @fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications

Description

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and often results in a guest trap causing services to return a 500. This bug has been fixed in version 3.16.0 of the `@fastly/js-compute` package.

Affected products and versions

Product Affected versions Fixed in
js-compute-runtime 3.0 3.0.0 → < 3.16.0 3.16.0

Other CVEs of js-compute-runtime

The 2 CVEs of js-compute-runtime →
CVE-2022-39218 The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when… 7.5 High
Track this CVE