GitHub Advisoryadvisory · npm

GHSA-77m7-9wvw-87fx Privilege Issues in jailed

HIGH Published 2022-05-03 Modified 2022-05-23 Official page ↗
Aliases
CVE-2022-23923
Ecosystem
npm
Packages
jailed
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Reviewed
2022-05-23

Affected packages

• npm jailed: <= 0.3.1 (no fix yet)

Description

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.

Related

Alias · CVE (1)

  • CVE-2022-23923 All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. vulnerability

References