CVE-2024-38375

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and often results in a guest trap causing services to return a 500. This bug has been fixed in version 3.16.0 of the `@fastly/js-compute` package.

• CWE-416

• https://github.com/fastly/js-compute-runtime/commit/4e16641ef4e159c4a11b500ac861b8fa8d9ff5d3
• https://github.com/fastly/js-compute-runtime/security/advisories/GHSA-mp3g-vpm9-9vqv
• https://github.com/fastly/js-compute-runtime/commit/4e16641ef4e159c4a11b500ac861b8fa8d9ff5d3
• https://github.com/fastly/js-compute-runtime/security/advisories/GHSA-mp3g-vpm9-9vqv

Published

Jun 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3837Use after free in QUIC in Google Chrome prior to 124.0.6367.…8.8
• CVE-2024-38370GLPI is a free asset and IT management software package. Sta…7.5
• CVE-2024-38371authentik is an open-source Identity Provider. Access restri…9.8
• CVE-2024-38372Undici is an HTTP/1.1 client, written from scratch for Node.…2
• CVE-2024-38373FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS…8.1
• CVE-2024-38374The CycloneDX core module provides a model representation of…7.5
• CVE-2024-38379Apache Allura's neighborhood settings are vulnerable to a st…4.8
• CVE-2024-3838Inappropriate implementation in Autofill in Google Chrome pr…5.5
• CVE-2024-38380This vulnerability occurs when user-supplied input is improp…5.4
• CVE-2024-38381In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-38382in OpenHarmony v4.0.0 and prior versions allow a local attac…5.5
• CVE-2024-38383Uncontrolled search path for some Intel(R) Quartus(R) Prime …7.8