Security: bytecodealliance/jco
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Node WASI filesystem sandbox can be escaped through symlink traversal | pkg:npm/%40bytecodealliance/preview2-shim@0.23.0GHSA-3fm6-wmq7-56g3 published
Sep 28, 2026 by vados-cosmonicHigh -
Preview2 filesystem preopens can be escaped through symlink traversal | pkg:github/bytecodealliance/jco@a22a3ec41a9de70594e5698b57c7c7db55363ce7GHSA-hfj5-4mfw-mqj5 published
Sep 28, 2026 by vados-cosmonicHigh -
Preview3 filesystem sandbox check is bypassed by a nonexistent segment followed by `..` | pkg:github/bytecodealliance/jco@a22a3ec41a9de70594e5698b57c7c7db55363ce7GHSA-wqvm-q6qr-j86c published
Sep 28, 2026 by vados-cosmonicHigh -
WASI sandbox network denial does not apply to outgoing HTTP requests | pkg:github/bytecodealliance/jcoGHSA-mpxw-mw8j-fcmr published
Sep 28, 2026 by vados-cosmonicHigh -
JCO silently truncates list at memory endGHSA-3827-xxx2-c5qc published
Sep 28, 2026 by vados-cosmonicLow -
Default WASI Preview2 Root Preopen Exposes Host FilesystemGHSA-pc9g-42c5-hg8v published
Sep 28, 2026 by vados-cosmonicHigh
Learn more about advisories related to bytecodealliance/jco in the GitHub Advisory Database