Vulnerabilities

Filters

1 selected

3 records

Sort

TI-2023-20664 CVE-2023-39532 · GHSA-9c4h-3f7h-322r

HIGH 82

SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01349 Published 2023-08-08 Fixed in 0.18.7, 0.15.24 +4 CWE-20

TI-2021-06158 CVE-2021-23543 · GHSA-q4j7-v27r-fgcx

MEDIUM 46

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0182 Published 2022-01-07 No fix listed CWE-1321

TI-2021-06169 CVE-2021-23594 · GHSA-pwm7-qr6j-3vjg

MEDIUM 46

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0182 Published 2022-01-07 No fix listed CWE-1321