Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2026/09/17 3:32 p.m.•10 views

GHSA-2VH9-CV26-P97M Duplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r273-hxvj-fxhp. This link is maintained to preserve external references. Original Description vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, ...

6.9CVSS6AI score0.00372EPSS
SaveExploits0References3
Rows per page
Query Builder