Description

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

Remediation

References

https://snyk.io/vuln/SNYK-JS-REALMSSHIM-2309907

https://www.npmjs.com/package/realms-shim

Related Vulnerabilities

CVE-2021-29484 Vulnerability in npm package ghost

CVE-2021-37136 Vulnerability in maven package io.netty:netty-codec

CVE-2020-15500 Vulnerability in npm package tileserver-gl

CVE-2023-47323 Vulnerability in maven package org.silverpeas.core:silverpeas-core-api

CVE-2013-1942 Vulnerability in npm package jplayer

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Exploit Third Party Advisory Product