1 matches found
GHSA-QCP4-V2JJ-FJX8 vm2 has a Sandbox Escape Vulnerability
Summary It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes Details https://github.com/patriksimek/vm2/blob/408fc855f1cc1bbc2985b029465ee0e732ada433/lib/bridge.jsL655-L658 BaseHandler can be reached via util.inspect same as...
10CVSS6.1AI score0.00815EPSS
SaveExploits1References5
20