Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/05/29 6:20 p.m.•45 views

NodeVM observability builtins leak host process and HTTP request data

Summary NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The following builtins are not blocked by the dangerous builtin denylist: text diagnosticschannel asynchooks perfhooks These modules are process-wide, not sandbox-local. Sandboxed code c...

6.9CVSS5.9AI score0.00383EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder