CVE-2023-26919

Name of the Vulnerable Software and Affected Versions delight-nashorn-sandbox versions 0.2.4 through 0.2.5

Description The issue allows for sandbox escape when allowExitFunctions is set to false. The loadWithNewGlobal function can be used to invoke the exit and quit methods, leading to the exit of the Java process.

Recommendations For delight-nashorn-sandbox versions 0.2.4 and 0.2.5, consider setting allowExitFunctions to true to prevent the invocation of the exit and quit methods. As a temporary workaround, restrict the use of the loadWithNewGlobal function until a patch is available.