{"action":"Upgrade vm2 to 3.9.16 or later.","affected":[{"fixed":"3.9.16","introduced":"0"}],"component":"vm2","cve_ids":["CVE-2023-29199"],"ecosystem":"npm","epss":0.03852,"exploited":false,"fixed_versions":["3.9.16"],"ghsa_id":"GHSA-xj72-wvfv-8985","id":"tcs_01M5KGJ85R4D5684VZ7N219FA8","modified_at":"2023-11-08T04:12:17.211100Z","published_at":"2023-04-12T20:42:44Z","references":["https://osv.dev/vulnerability/GHSA-xj72-wvfv-8985","https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985","https://nvd.nist.gov/vuln/detail/CVE-2023-29199","https://github.com/patriksimek/vm2/issues/516","https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7","https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c","https://github.com/patriksimek/vm2","https://github.com/patriksimek/vm2/releases/tag/3.9.16"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xj72-wvfv-8985","url":"https://osv.dev/vulnerability/GHSA-xj72-wvfv-8985"}],"summary":"vm2 Sandbox Escape vulnerability"}