CVE-2023-25344

Name of the Vulnerable Software and Affected Versions swig-templates versions 2.0.4 and earlier swig versions 1.4.2 and earlier

Description An issue allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.

Recommendations For swig-templates versions 2.0.4 and earlier, consider disabling the use of crafted Object.prototype anonymous functions until a patch is available. For swig versions 1.4.2 and earlier, consider disabling the use of crafted Object.prototype anonymous functions until a patch is available. As a temporary workaround, restrict the execution of arbitrary code via crafted Object.prototype anonymous functions in both swig-templates and swig.