CVE-2017-1001004: Typed Function Project Typed Function

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

Affected products

• Typed Function Project Typed Function: before 0.10.6 (fixed in 0.10.6)

Published 2017-11-27. Last modified 2026-06-17.