GHSA-77m7-9wvw-87fxHighCVSS 8.6
Privilege Issues in jailed
🔗 CVE IDs covered (1)
📋 Description
All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.
🎯 Affected products1
- npm/jailed:<= 0.3.1