CVE-2022-39218

score

<0.1

cvss

7.5

epss

0.9%

published

2022-09-20

kev added

—

first seen

2026-10-21

Fastly Compute@Edge JavaScript SDK versions prior to 0.5.3 contain a cryptographically weak pseudorandom number generator caused by fixed seed initialization in WebAssembly modules, letting attackers predict random values and bypass security controls, exploit requires attacker to control or predict seed.