security1 distinct publisher
A sandbox escape with no CVE: isolated-vm patches, and a million weekly installs have to move
A type confusion in isolated-vm's ExternalCopy turns a single ivm.Reference into host control-flow hijack. Fixes shipped in 6.2.0 and 7.0.1, under a GHSA number and no CVE.
Publishers:thehackernews.com
Reality
- Evidence62
- Adoption66
- Hype gap+12
- Incentives58
- Confidence57