39d ago

A TOCTOU vulnerability in the Node.js isolated-vm library allows guest-to-host sandbox escape with potential remote code execution. Patches available in versions 6.2.0 and https:// deafnews.it/en/arti

A TOCTOU vulnerability in the Node.js isolated-vm library allows guest-to-host sandbox escape with potential remote code execution. Patches available in versions 6.2.0 and https:// deafnews.it/en/article/isolate d-vm-c-binding-layer-bug-enables-sandbox-escape-to-host-rce

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

A TOCTOU vulnerability in the Node.js isolated-vm library allows guest-to-host sandbox escape with potential remote code execution. Patches available in versions 6.2.0 and https:// deafnews.it/en/arti

mastodon:infosec-exchangeother39d ago kagi ↗

A TOCTOU vulnerability in the Node.js isolated-vm library allows guest-to-host sandbox escape with potential remote code execution. Patches available in versions 6.2.0 and https:// deafnews.it/en/article/isolate d-vm-c-binding-layer-bug-enables-sandbox-escape-to-host-rce