~ / search / GHSA-77m7-9wvw-87fx

GHSA-77m7-9wvw-87fx

Privilege Issues in jailed

Source: GitHub Advisory Database (reviewed) High CVE-2022-23923

Packages

EcosystemPackageAffectedFixed in
npm jailed <= 0.3.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.

References

External links from the advisory. They lead to third-party sites.