GHSA-77m7-9wvw-87fxHighCVSS 8.6

Privilege Issues in jailed

Published
May 3, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

📋 Description

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.

🎯 Affected products1

  • npm/jailed:<= 0.3.1

🔗 References (4)