all InfoSec news
Researchers disclose critical sandbox escape bug in vm2 sandbox library
Security Affairs securityaffairs.co
The development team behind the vm2 JavaScript sandbox library addressed a critical Remote Code Execution vulnerability. The developers behind the vm2 JavaScript sandbox module have addressed a critical vulnerability, tracked as CVE-2023-29017 (CVSS score 9.8), that could be exploited to execute arbitrary shellcode. vm2 is a sandbox that can run untrusted code in an isolated context […]
The post Researchers disclose critical sandbox escape bug in vm2 sandbox library appeared first on Security Affairs.
breaking news bug code code execution context critical critical vulnerability cve cvss developers development escape exploited hacking information security news it information security javascript library pierluigi paganini remote code remote code execution researchers run sandbox sandbox escape score security shellcode team untrusted vm2 vulnerability