#vm2

[ follow ]
#sandbox-escape #nodejs #untrusted-code #application-security #dependency-risk #security-vulnerability
Information security
fromInfoWorld
5 days ago

13 new critical holes in JavaScript sandbox allow execution of arbitrary code

Sandboxing untrusted JavaScript in vm2 is fragile because sandbox escapes can enable full system compromise when credentials, secrets, filesystem, network, or deployment privileges are accessible.
Node JS
fromBleepingComputer
6 days ago

Critical vm2 sandbox bug lets attackers execute code on hosts

A critical vulnerability in vm2 allows escaping the sandbox and executing arbitrary code on the host system.
[ Load more ]