CVE-2015-8857

CRITICAL · CVSS 9.8 EPSS 3.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2015-8857

Severity

CRITICAL

CVSS

9.8

EPSS

3.56%

Java

Original NVD Description

The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly rewritten Javascript.