CVE-2019-10761

HighCVSS 8.3/10Last modified Jun 17, 2026

Description

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code running the script allowing it to spawn a child_process and execute arbitrary code.

Metrics

CVSS 3.1 8.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-674

Affected software

No affected versions have been published.

Timeline

Published: Jul 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-107629.8columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping.CVE-2019-107636.5pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attacker with limited privileges (classes permission) can achieve a SQL inje CVE-2019-107647.4In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private ke CVE-2019-107659.8iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.CVE-2019-107669.8Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.CVE-2019-107677.5An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin CVE-2019-107687.5In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto CVE-2019-107699.8safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulner CVE-2019-10775.0An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studi CVE-2019-107706.1All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS). This affects th CVE-2019-107716.1Characters in the GET url path are not properly escaped and can be reflected in the server response.CVE-2019-107726.1It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by