Javadelight Nashorn Sandbox
2 CVEs affecting Javadelight Nashorn Sandbox. Latest disclosed: 2023-04-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40660 | High | 7.5 | 2022-06-14 | An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack. |
CVE-2023-26919 | High | 7.2 | 2023-04-10 | delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to… |