11 matches found
Exposure of Resource to Wrong Sphere
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the bufferFrom and related Buffer factory functions in lib/setup-sandbox.js, where Node.js serves small...
10CVSS6.2AI score0.00316EPSS
SaveExploits0References2
20