9.8
Critical
CVE-2021-23555 The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by…
Description
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vm2 3.9 | earliest → < 3.9.6 | 3.9.6 |
Other CVEs of vm2
The 4 CVEs of vm2 →
CVE-2022-25893
The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
9.8
Critical
CVE-2019-10761
This affects the package vm2 before 3.6.11
8.3
High
CVE-2021-23449
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of…
9.8
Critical