1 matches found
GHSA-28Q4-XRQH-9479 Duplicate Advisory: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8686-vhfx-7r3j. This link is maintained to preserve external references. Original Description vm2 through 3.11.6 does not normalize node:-prefixed builtin specifiers when evaluating user-supplied negative deny...
9.9CVSS5.9AI score
SaveExploits0References3
20