@tutor/jailed-sandbox (>=0.2.0, <=0.2.1), @tutor/markdown2html (>=0.1.2, <=0.2.3) +4 more potentially affected by CVE-2022-23923 via jailed (>=0.2.0, <=0.3.1)

jailed NPM version =0.2.0, =0.2.0, =0.1.2, =1.0.0, =0.0.1, =0.1.13, =2.0.0, =3.1.9 Source cves: CVE-2022-23923 Source advisory: OSV:GHSA-77M7-9WVW-87FX...

CVE-2022-23923 Sandbox Bypass

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert method which can access the main application. Exported methods are stored in the application.remote object...

CVE-2022-23923

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert method which can access the main application. Exported methods are stored in the application.remote object...

@tutor/jailed-sandbox (>=0.2.0, <=0.2.1), @tutor/markdown2html (>=0.1.2, <=0.2.3) +4 more potentially affected by CVE-2022-23923 via jailed (>=0.2.0, <=0.3.1)

jailed NPM version =0.2.0, =0.2.0, =0.1.2, =1.0.0, =0.0.1, =0.1.13, =2.0.0, =3.1.9 Source cves: CVE-2022-23923 Source advisory: SNYK:JS-JAILED-2391490...