Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/10/05 10:38 p.m.•19 views

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

Summary vm2 3.11.6 this fork's latest release contains an incomplete-fix bypass of the Error.cause host-reference sanitization added in GHSA-m283-3h24-438v commit 7e3faaf. Sandbox code that catches a host-wrapped AggregateError which is revisited within a single handleException traversal...

9.5CVSS7.9AI score0.00762EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder