Red Hat Security Advisory

RHSA-2023:1896

Red Hat Advanced Cluster Management 2.5 hotfix security update for console

Released 2023-04-20 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 rhacm2/console-rhel8

Fixes 3 records

TI-2023-14382 CVE-2023-30547 · GHSA-ch3r-j5x3-6q2m

Sandbox Escape in vm2

CRITICAL 87

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.72973 Published 2023-04-17 Partial fix · 3.9.17 CWE-74

TI-2023-13478 CVE-2023-29017 · GHSA-7jxr-cg7f-gpgv

vm2 Sandbox Escape vulnerability

HIGH 84

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.63186 Published 2023-04-06 Partial fix · 3.9.15 CWE-913

TI-2023-13627 CVE-2023-29199 · GHSA-xj72-wvfv-8985

vm2 Sandbox escape vulnerability

MEDIUM 55

There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03852 Published 2023-04-14 Partial fix · 3.9.16 CWE-913