9.8
Critique
CVE-2021-23555 The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by…
Description
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vm2 3.9 | premières → < 3.9.6 | 3.9.6 |
Autres CVE de vm2
Les 4 CVE de vm2 →
CVE-2022-25893
The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the…
9.8
Critique
CVE-2019-10761
This affects the package vm2 before 3.6.11
8.3
Élevée
CVE-2021-23449
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of…
9.8
Critique