GitHub Advisoryadvisory · npm

GHSA-6jg8-7333-554w Sandbox Breakout in realms-shim

CRITICAL Published 2019-10-04 Modified 2021-09-02 Official page ↗
Ecosystem
npm
Packages
realms-shim, ses
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2020-06-16

Affected packages

• npm realms-shim: < 1.2.0 → fixed in 1.2.0 • npm ses: < 0.6.3 → fixed in 0.6.3

Description

Versions of `realms-shim` prior to 1.2.0 are vulnerable to a Sandbox Breakout. `Reflect.construct` can be used on the sandboxed Function constructor to reach the prototypes of the primal Realm, which may allow an attacker to escape the sandbox and execute arbitrary code. Recommendation Upgrade to version 1.2.0 or later.

References