Story thread · 2 reports / 2 sources

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

thehackernews.com · 8h · first reportShare

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.