Intel

AIKIDO-2025-10357

@cloudflare/workerd-darwin-64 is vulnerable to Use after free

Use after free Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jun 9, 2025

47

Medium Risk

This Affects:

JS@cloudflare/workerd-darwin-64
1.20231218.0 - 1.20250606.0
Fixed in 1.20250607.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package are affected by a use after free vulnerability in the sendExceptionToInspector function. An attacker can exploit this to crash the server or leak arbitrary memory contents.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

@cloudflare/workerd-darwin-64 is vulnerable to Use after free in versions 1.20231218.0 - 1.20250606.0.

How to fix this

Upgrade the @cloudflare library to the patch version.