Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through improper enforcement of the allowAsync option in the VM and NodeVM. An attacker can execute code asynchronously...