9.8
Critique
CVE-2021-23449 This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of…
Description
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vm2 3.9 | premières → < 3.9.4 | 3.9.4 |
Autres CVE de vm2
Les 4 CVE de vm2 →
CVE-2022-25893
The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
9.8
Critique
CVE-2019-10761
This affects the package vm2 before 3.6.11
8.3
Élevée
CVE-2021-23555
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by…
9.8
Critique