{
"id": "GHSA-6jg8-7333-554w",
"aliases": [],
"details": "Versions of `realms-shim` prior to 1.2.0 are vulnerable to a Sandbox Breakout. `Reflect.construct` can be used on the sandboxed Function constructor to reach the prototypes of the primal Realm, which may allow an attacker to escape the sandbox and execute arbitrary code.\n\n\n## Recommendation\n\nUpgrade to version 1.2.0 or later.",
"summary": "Sandbox Breakout in realms-shim",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.0"
}
]
}
],
"package": {
"name": "realms-shim",
"ecosystem": "npm"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.6.3"
}
]
}
],
"package": {
"name": "ses",
"ecosystem": "npm"
}
}
],
"modified": "2021-09-02T16:40:48Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"published": "2019-10-04T17:56:12Z",
"references": [
{
"url": "https://github.com/Agoric/realms-shim/security/advisories/GHSA-6jg8-7333-554w",
"type": "WEB"
},
{
"url": "https://github.com/Agoric/realms-shim",
"type": "WEB"
},
{
"url": "https://github.com/advisories/GHSA-6jg8-7333-554w",
"type": "ADVISORY"
},
{
"url": "https://snyk.io/vuln/SNYK-JS-REALMSSHIM-471680",
"type": "WEB"
},
{
"url": "https://www.npmjs.com/advisories/1180",
"type": "WEB"
},
{
"url": "https://www.npmjs.com/advisories/1181",
"type": "WEB"
},
{
"url": "https://www.npmjs.com/advisories/1182",
"type": "WEB"
},
{
"url": "https://www.npmjs.com/advisories/1190",
"type": "WEB"
},
{
"url": "https://www.npmjs.com/advisories/1191",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [],
"severity": "CRITICAL",
"github_reviewed": true,
"nvd_published_at": null,
"github_reviewed_at": "2020-06-16T21:19:30Z"
}
}