easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code.

Published Apr 5, 2022 · Updated Aug 4, 2024 · Assigned by mitre