cve/2021/CVE-2021-23555.md
2024-06-18 02:51:15 +02:00

725 B

CVE-2021-23555

Description

The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.

POC

Reference

Github