Skip to content
OpenAdvisories

Package · npm

sandbox

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Sandbox Breakout / Arbitrary Code Execution in sandbox

    All versions of `sandbox` through 0.8.2 are vulnerable to Sandbox Escape leading to Remote Code Execution. Due to insufficient input sanitization it is possible to escape the sandbox using constructors. ## Proof of concept ``` var Sandbox = require("sandbox")…