{"action":"Upgrade vm2 to 3.9.11 or later.","affected":[{"fixed":"3.9.11","introduced":"0"}],"component":"vm2","cve_ids":["CVE-2022-36067"],"ecosystem":"npm","epss":0.47868,"exploited":false,"fixed_versions":["3.9.11"],"ghsa_id":"GHSA-mrgp-mrhc-5jrq","id":"tcs_01M5KG1MAXR59VHYKE1PV25C9H","modified_at":"2023-11-08T04:09:59.397193Z","published_at":"2022-09-28T13:09:01Z","references":["https://osv.dev/vulnerability/GHSA-mrgp-mrhc-5jrq","https://github.com/patriksimek/vm2/security/advisories/GHSA-mrgp-mrhc-5jrq","https://nvd.nist.gov/vuln/detail/CVE-2022-36067","https://github.com/patriksimek/vm2/issues/467","https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164","https://github.com/patriksimek/vm2","https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71","https://security.netapp.com/advisory/ntap-20221017-0002","https://www.oxeye.io/blog/vm2-sandbreak-vulnerability-cve-2022-36067"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-mrgp-mrhc-5jrq","url":"https://osv.dev/vulnerability/GHSA-mrgp-mrhc-5jrq"}],"summary":"vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host"}