📦 Vm2

This vulnerability in vm2 sandbox for Node.js allows attackers to bypass Promise callback sanitization and escape the sandbox environment. Attackers can execute arbitrary code on the host system with ...

CVE-2023-37903 is a critical sandbox escape vulnerability in vm2, a Node.js sandboxing library. Attackers with code execution inside the vm2 sandbox can exploit Node.js's custom inspect function to br...

CVE-2023-37466 is a critical sandbox escape vulnerability in vm2, a Node.js sandbox library. Attackers can bypass Promise handler sanitization using the @@species accessor property to escape the sandb...

CVE-2023-32314 is a critical sandbox escape vulnerability in vm2 that allows attackers to bypass sandbox protections and execute arbitrary code on the host system. It affects all vm2 users running unt...

This vulnerability in vm2 sandbox allows attackers to escape the sandbox environment and execute arbitrary code on the host system by exploiting improper exception sanitization. It affects all applica...

This vulnerability in vm2's exception sanitization logic allows attackers to bypass sandbox protections and execute arbitrary code on the host system. It affects all applications using vm2 versions up...

CVE-2023-29017 is a critical sandbox escape vulnerability in vm2 that allows attackers to bypass sandbox protections and execute arbitrary code on the host system. This affects any application using v...

CVE-2021-23449 is a Prototype Pollution vulnerability in the vm2 sandbox package that allows attackers to escape the sandbox and execute arbitrary code on the host system. This affects any application...