Inquiry Regarding Vulnerability in vm2 NPM Package

patriksimek / vm2

Advanced vm/sandbox for Node.js

MIT License

3.86k stars 293 forks source link

Inquiry Regarding Vulnerability in vm2 NPM Package #537

Open andrecamposciandt opened 2 months ago

andrecamposciandt commented 2 months ago

We have identified a vulnerability in our project related to the vm2 npm package. Unfortunately, there is currently no update available that resolves this issue. We would like to know if there is any solution under development to address this vulnerability. Any guidance or information on this matter would be greatly appreciated.

https://github.com/advisories/GHSA-cchq-frgv-rjh5
https://github.com/advisories/GHSA-g644-9gfx-q4q4

Thank you for your assistance.

netroy commented 2 months ago

The project readme states (since over a year) that this project has been discontinued.

@patriksimek maybe it's time to archive the repo?