Snyk Security Database

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via a sloppy-mode host function invoked from the sandbox with a nullish receiver. When sandbox code calls an embedder-exposed sloppy-mode host function without a receiver, V8's OrdinaryCallBindThis substitutes the host realm's global object for the function's this. The bridge in lib/bridge.js previously wrapped and delivered that global object into the sandbox like any other host value, allowing an attacker to reach host globals and call process.getBuiltinModule('child_process') or equivalent APIs for full remote code execution. The fix adds an identity check at the three host-to-sandbox coercion chokepoints (thisFromOtherWithFactory, thisEnsureThis, thisFromOtherForThrow) to refuse delivery of the host global, returning undefined instead.

Note: This is only exploitable if the embedding application exposes at least one non-strict (sloppy-mode) host function to the sandbox; strict-mode and ES module host functions are not affected.

vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs

Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions in mooncake_connector.py, the Mooncake KV connector's receiver loop fails to report remote KV load failures back to the scheduler. When a remote KV cache transfer returns an error or raises an exception, the failure is only logged and the affected request's block IDs are never marked invalid, leaving the scheduler unaware that the transfer did not complete. This causes the scheduler to stall waiting for results that will never arrive, resulting in a crash or hang that denies service to all pending requests.

Affected versions of this package are vulnerable to Improper Authentication through the AadOidcIdTokenDecoderFactory and AadB2cOidcIdTokenDecoderFactory OIDC ID token decoders in the Spring Cloud Azure OAuth2 login components. An attacker can elevate privileges and sign in as an unauthorized tenant user by supplying a forged or tenant-mismatched ID token that is signed correctly but has an unvalidated iss claim and, in AAD multi-tenant flows, an inconsistent tid claim. This allows unauthorized access to applications that rely on the issuer or tenant claims to restrict which identities may authenticate.