Description
constantinople before 3.1.1 affected by a sandbox bypass.
Recommendation
Update the constantinople package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.1.1
- Patched version(s): 3.1.1
References
Related Issues
- Sandbox Bypass Leading to Arbitrary Code Execution in constantinople - Vulnerability
- @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range) - Vulnerability
- Sandbox Breakout / Arbitrary Code Execution in localeval - Vulnerability
- TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs - CVE-2026-47760
You might also like:
- Tags:
- npm
- constantinople
Anything's wrong? Let us know Last updated on January 09, 2023