| Package | Affected versions | Patched versions |
|---|---|---|
| vm2 | < 3.9.6 | 3.9.6 |
| vm2 | < 3.9.6 | 3.9.6 |
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during generation of a stacktraces, which can lead to execution of arbitrary code on the host machine.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free