Security Advisory

CVE-2021-23449

9.8
CRITICAL

Vulnerability Description

This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.
Published Date October 18, 2021
Official Source NIST NVD Advisory