Skip to content
OpenAdvisories

Package · npm

@hoppscotch/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.4
    CVE-2024-34347

    @hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE

    @hoppscotch/cli is a CLI to run Hoppscotch Test Scripts in CI environments. Prior to 0.8.0, the @hoppscotch/js-sandbox package provides a Javascript sandbox that uses the Node.js vm module. However, the vm module is not safe for sandboxing untrusted Javascrip…

    hoppscotch hoppscotch @hoppscotch/cli npm