[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMd-apXh9RNaEn7EOglxytgE-lt6xCgBHuQ8Fl5M7i_w":3,"g5a-ex:mit\u002Fscratch-vm@*":50,"g5a-family:mit\u002Fscratch-vm":52},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":27,"seoMetadata":28,"meta":47},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":16},"mit","scratch-vm",1,0,"2020-07-16",[13],{"version":14,"cve_count":10,"kev_count":10,"has_kev":15},"0.2.0-prerelease.20200714185213",false,"Scratch-vm by Mit is a technology product with 1 tracked version and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":14,"cve_count":10,"kev_count":10,"has_kev":15},[20],{"cveId":21,"description":22,"publishedDate":11,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":15,"epssScore":26},"CVE-2020-14000","MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease.20200714185213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code execution because the URL's content is treated as a script and is executed as a worker. The responsible code is getExtensionIdForOpcode in serialization\u002Fsb3.js. The use of _ is incompatible with a protection mechanism in older versions, in which URLs were split and consequently deserialization attacks were prevented. NOTE: the scratch.mit.edu hosted service is not affected because of the lack of worker scripts.",9.8,"v3.1","Critical",0.0283,[],{"title":29,"metaDescription":30,"keywords":31,"structuredData":32},"Scratch-vm by Mit - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Scratch-vm by Mit covering 1 version with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Scratch-vm vulnerabilities, Scratch-vm security, Scratch-vm CVE, Mit Scratch-vm, Scratch-vm threat intelligence, Mit security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":33,"@type":34,"name":35,"description":30,"url":36,"manufacturer":37,"applicationCategory":41,"softwareVersion":42,"mainEntity":43},"https:\u002F\u002Fschema.org","SoftwareApplication","Scratch-vm","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmit\u002Fscratch-vm",{"@type":38,"name":39,"url":40},"Organization","Mit","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmit","Security Software","1 versions tracked",{"@type":44,"name":45,"description":46,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Scratch-vm Security Vulnerabilities","Security vulnerabilities affecting Scratch-vm by Mit",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":48,"apiVersion":49},"2026-10-19T18:08:29.282Z","3.0",{"rows":51,"total":10,"capped":15,"failed":10},[],[]]