Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-23449

Sandbox Bypass

Description

This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a vm2

  • unspecified to < 3.9.4affected

References