security1 distinct publisher
isolated-vm's ExternalCopy type confusion turns the sandbox into a path to the host
A time-of-check/time-of-use bug in the library many platforms use to run untrusted JavaScript lets guest code reach the host process. Fixes are in 6.2.0 and 7.0.1, and there is still no CVE.
Publishers:securityweek.com
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+15
- Incentives58
- Confidence55