Description (CNA)
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| patriksimek / vm2 | affected < 3.11.2 |
CWE
CWE-668
References
ADP enrichment
No English description supplied.
A flaw was found in vm2 (before 3.11.2). A sandbox escape vulnerability allows remote attackers to execute arbitrary code on the host system by breaking vm2 isolation. Fixed in 3.11.2.