Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.
Se muestra el contenido original; la traduccion localizada aun no esta disponible.
Qué ocurrió
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.
Por que importa
The incident may affect operational continuity, asset safety or trust around Security. Watch for verified scope and remediation.
Entidades afectadas
Ver evidencia
1 articulos · 1 informe original · 1 independientes
- The Hacker NewsFuente primaria · Respalda · EN · 100%Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE ↗
Afirmaciones
- Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE Observado
Conflictos
No se detectaron conflictos importantes en la evidencia disponible.
Cronología
- Primera publicación
- No verificado · 46/64%
Movimiento del mercado posterior al evento
La reacción del mercado aún no está disponible para este activo y periodo.