CVE-2020-24345

Name of the Vulnerable Software and Affected Versions JerryScript versions prior to 2.3.0

Description The issue is related to stack consumption via a function that utilizes new new Proxy(a,{}) and JSON.parse("[]",a). The vendor notes that the problem stems from the lack of the --stack-limit option.

Recommendations For JerryScript versions prior to 2.3.0, consider adding the --stack-limit option to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.