vm2 Sandbox Escape: allowAsync Bypass via Promise Static Methods with PoC
Security Advisory
GHSA-8fg-w286-fmq2
High
vm2
Affected:
- vm2 <= 3.11.7
Fixed in:
- 3.11.8
Referenced CVEs:
CVE-2026-92959 · 7.1
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.