WS-2020-0076

veval trough 1.0.1 is vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

WS-2020-0075

@zhaoyao91/eval-in-vm through 0.0.0 ia vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

WS-2020-0074

pitboss-ng through 2.0.0 is vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

WS-2020-0073

sandbox through 0.8.6 is vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

WS-2020-0072

lighter-vm through 1.0.0 is vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

PT-2020-21377

Name of the Vulnerable Software and Affected Versions @zhaoyao91/eval-in-vm affected versions not specified Description The issue allows for Sandbox Escape, leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor. This may...

PT-2020-21306

Name of the Vulnerable Software and Affected Versions sandbox affected versions not specified Description The issue allows for Sandbox Escape, leading to Remote Code Execution. It is caused by the failure to restrict access to the main context through this.constructor.constructor. This could enab...

PT-2020-21220

Name of the Vulnerable Software and Affected Versions lighter-vm versions affected versions not specified Description The issue allows for Sandbox Escape, leading to Remote Code Execution. It is caused by a failure to restrict access to the main context through this.constructor.constructor. This...

PT-2020-20991

Name of the Vulnerable Software and Affected Versions pitboss-ng versions affected versions not specified Description The issue allows for Sandbox Escape, leading to Remote Code Execution. The problem arises because the package fails to restrict access to the main context through...

PT-2020-21045

Name of the Vulnerable Software and Affected Versions veval versions affected versions not specified Description The issue allows for Sandbox Escape, leading to Remote Code Execution. The veval package fails to restrict access to the main context through this.constructor.constructor. This may...