DevThe Hacker Newsabout 1 hour ago
Isolated-vm Flaw Enables Sandbox Escape
1 min read
A critical flaw in isolated-vm, a Node.js sandbox library, allows JavaScript to escape and corrupt host memory, risking remote code execution. The vulnerability affects versions up to 7.0.0 and is patched in 6.2.0 and 7.0.1. Endor Labs discovered the issue.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
