VDB
BDU%3A2022-05598
BDU%3A2022-05598
PUBLISHED
CVSS 10 CRITICAL
Уязвимость библиотеки vm2 пакетного менеджера NPM, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Node.js Foundation | vm2 |
Timeline
- Sep 8, 2022 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71 url
- https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164 url
- https://github.com/patriksimek/vm2/issues/467 url
- https://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq url