VYPR

delight-nashorn-sandbox

by Javadelight

CVEs (1)

  • CVE-2023-26919HigApr 10, 2023
    risk 0.47cvss 7.2epss 0.01

    delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.