Threats tagged 'ghsa-2555-vffj-g73c'

Skyvern versions through 1.0.56 have a sandbox bypass vulnerability that allows authenticated users to execute arbitrary code on the server. This is achieved by reconstructing functions from raw bytecode using types.CodeType, enabling attackers to deploy scripts that evade the is_safe_script_code AST denylist and import restricted modules such as subprocess or socket. The vulnerability has a high severity with a CVSS score of 8.8.