VYPR

npm package

jailed

pkg:npm/jailed

Vulnerabilities (1)

  • CVE-2022-23923HigMay 1, 2022
    affected <= 0.3.1

    All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.