Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 6:20 p.m.22 views

NodeVM observability builtins leak host process and HTTP request data

Summary NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The following builtins are not blocked by the dangerous builtin denylist: text diagnosticschannel asynchooks perfhooks These modules are process-wide, not sandbox-local. Sandboxed code c...

6.9CVSS5.8AI score0.00308EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder