{"id":"RUSTSEC-2024-0405","summary":"op_panic in the base runtime can force a panic in the runtime's containing thread","details":"Affected versions use deno_core releases that expose `Deno.core.ops.op_panic` to the JS runtime in the base core\n\nThis function when called triggers a manual panic in the thread containing the runtime.\n\nIt can be fixed by stubbing out the exposed op:\n```javascript\nDeno.core.ops.op_panic = (msg) =\u003e { throw new Error(msg) };\n```","aliases":["GHSA-fwfx-rrv8-crpf"],"modified":"2025-10-28T06:29:24.524094Z","published":"2024-07-18T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/rustyscript"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2024-0405.html"},{"type":"REPORT","url":"https://github.com/rscarson/rustyscript/issues/174"}],"affected":[{"package":{"name":"rustyscript","ecosystem":"crates.io","purl":"pkg:cargo/rustyscript"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.1-0"},{"fixed":"0.6.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"os":[],"functions":[]}},"database_specific":{"informational":null,"categories":["denial-of-service"],"cvss":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2024-0405.json"}}],"schema_version":"1.7.3"}