Security Advisory
CVE-2021-23449
9.8
CRITICAL
Vulnerability Description
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.
Published Date
October 18, 2021
Official Source
NIST NVD Advisory