Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/01 3:29 p.m.•7 views

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

Summary vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ''. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension...

9.9CVSS6.7AI score0.00616EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder