Synk has released security updates to address vulnerabilities in vm2 Project vm2 for Node.js. Exploiting this vulnerability leads to access to a host object and a sandbox compromise.

For a complete description of the vulnerabilities and affected systems go to CVE-2022-25893 Detail.

IT Security

Read more about IT Security service offerings.