Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23555

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6pw2-5hjv-9pf7

Sandbox bypass in vm2 The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.

gitlab/npm/vm2/CVE-2021-23555

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The package vm2 is vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.