9.8
Critical
CVE-2021-23449 This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of…
Description
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vm2 3.9 | earliest → < 3.9.4 | 3.9.4 |
Other CVEs of vm2
The 4 CVEs of vm2 →
CVE-2022-25893
The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
9.8
Critical
CVE-2019-10761
This affects the package vm2 before 3.6.11
8.3
High
CVE-2021-23555
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by…
9.8
Critical