TI-2023-14382 CVE-2023-30547 · GHSA-ch3r-j5x3-6q2m
Sandbox Escape in vm2
Priority CRITICAL 87
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.
RHSA-2023:1893
Multicluster Engine for Kubernetes 2.0 hotfix security update for console
Released 2023-04-20 · Red Hat rating Critical · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.0 for RHEL 8 multicluster-engine/console-mce-rhel8, multicluster-engine/multicluster-engine-console-mce-rhel8
Fixes 3 records
TI-2023-13478 CVE-2023-29017 · GHSA-7jxr-cg7f-gpgv
vm2 Sandbox Escape vulnerability
Priority HIGH 84
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.
TI-2023-13627 CVE-2023-29199 · GHSA-xj72-wvfv-8985
vm2 Sandbox escape vulnerability
Priority MEDIUM 55
There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be…