Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-23771

Sandbox Bypass

Description

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a notevil

  • 0 to < unspecifiedaffected

n/a argencoders-notevil

  • 0 to < unspecifiedaffected

References