Lucene search
+L

2 matches found

OSV
OSV
added 2023/07/13 5:01 p.m.30 views

GHSA-G644-9GFX-Q4Q4 vm2 Sandbox Escape vulnerability

In vm2 for versions up to 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. Impact Remote Code Execution, assuming the attacker has arbitrary code execution primitive inside the context of vm2 sandbox. Patches None. Workarounds None. References...

9.8CVSS7.5AI score0.04215EPSS
SaveExploits1References5
Rows per page
Query Builder