Homepage
About Snyk

js2py@0.30 vulnerabilities

JavaScript to Python Translator & JavaScript interpreter written in 100% pure Python.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the js2py package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Code Injection

Js2Py is a JavaScript to Python Translator & JavaScript interpreter written in 100% pure Python.

Affected versions of this package are vulnerable to Code Injection through the disable_pyimport component. With this vulnerability, if the threat actor hosts a website containing a malicious js file or sends a malicious script via HTTP API for victim to parse, usual restrictions can be evaded and any command can be executed on the host.

How to fix Code Injection?

A fix was pushed into the master branch but not yet published.

[0,)
Go back to all versions of this package