Skip to content

v4.0.3

Latest

Choose a tag to compare

@dibenede dibenede released this 17 Sep 13:46
· 2 commits to main since this release

Fix unbounded recursion during binary deserialization (GHSA-5h29-r2cp-hfmr) .

We now use a depth limit of 200. Previously, overruns trigger RangeErrors from the VM. We are now catching these and swapping them to SyntaxError.