Lucene search
+L

1 matches found

OSV
OSV
added 2022/03/18 12:1 a.m.33 views

GHSA-8G4M-CJM2-96WQ Sandbox escape in notevil and argencoders-notevil

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. Note: This...

6.5CVSS5.8AI score0.01013EPSS
SaveExploits1References4
Rows per page
Query Builder