Lucene search
+L

25 matches found

Github Security Blog
Github Security Blog
•added 2026/10/01 3:29 p.m.•19 views

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

Summary vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ''. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension...

9.9CVSS9.1AI score0.00616EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder