Skip to content
OpenAdvisories

Package · npm

realms-shim

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.8
    CVE-2021-23543

    Sandbox Bypass

    All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

    realms-shim npm
  • Critical 9.8
    CVE-2021-23594

    Sandbox Bypass

    All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

    realms-shim npm
  • Critical 9.8
    GHSA-7cg8-pq9v-x98q

    Sandbox Breakout in realms-shim

    Versions of `realms-shim` prior to 1.2.1 are vulnerable to a Sandbox Breakout. The Realms evaluation function has an option to apply Babel-like transformations to the source code before it reaches the evaluator. One portion of this transform pipeline exposed …

    realms-shim npm
  • Critical 9.8
    GHSA-6jg8-7333-554w

    Sandbox Breakout in realms-shim

    Versions of `realms-shim` prior to 1.2.0 are vulnerable to a Sandbox Breakout. `Reflect.construct` can be used on the sandboxed Function constructor to reach the prototypes of the primal Realm, which may allow an attacker to escape the sandbox and execute arb…

    ses realms-shim npm