1 matches found
vm2 allows a sandboxed plugin to execute native code through `node:sqlite`
Summary vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ''. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension...
9.9CVSS6.7AI score0.00616EPSS
SaveExploits0References6Affected Software1
20