Lucene search

K
osvGoogleOSV:GHSA-8G4M-CJM2-96WQ
HistoryMar 18, 2022 - 12:01 a.m.

Sandbox escape in notevil and argencoders-notevil

2022-03-1800:01:11
Google
osv.dev
21
sandbox escape
prototype pollution
incomplete fix
deprecated
notevil
argencoders-notevil

EPSS

0.001

Percentile

30.3%

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object’s prototype. Note: This vulnerability derives from an incomplete fix in SNYK-JS-NOTEVIL-608878. This package has been deprecated.

EPSS

0.001

Percentile

30.3%

Related for OSV:GHSA-8G4M-CJM2-96WQ