PT-2026-94330

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.8 Description The software fails to fully enforce the allowAsync: false option within VM and NodeVM. Although localPromise.prototype.then is replaced to prevent asynchronous operations, the sandbox's Promise static...