Security Advisory
CVE-2021-23449
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host machine.