{
  "entrypoint_kind": "function_call",
  "entrypoint_detail": "vm2 VM/NodeVM library API: sandboxed script hijacks Symbol.species on a host-realm Promise returned by an exposed host function and receives the raw host rejection value (host process) via V8's internal Thrower",
  "service_started": false,
  "healthcheck_passed": false,
  "target_path_reached": true,
  "runtime_stack": [
    "node",
    "vm2"
  ],
  "target_identity": {
    "repository_url": "https://github.com/patriksimek/vm2",
    "target_digest": "88d50f5242e4bc7652abad9d5d9a60b68f0fabd922673be894a9ee39288125dd",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/proof/fixed-NodeVM-1.log",
    "repro/proof/fixed-NodeVM-2.log",
    "repro/proof/fixed-VM-1.log",
    "repro/proof/fixed-VM-2.log",
    "repro/proof/marker-vulnerable-NodeVM-1.txt",
    "repro/proof/marker-vulnerable-NodeVM-2.txt",
    "repro/proof/marker-vulnerable-VM-1.txt",
    "repro/proof/marker-vulnerable-VM-2.txt",
    "repro/proof/vulnerable-NodeVM-1.log",
    "repro/proof/vulnerable-NodeVM-2.log",
    "repro/proof/vulnerable-VM-1.log",
    "repro/proof/vulnerable-VM-2.log",
    "repro/harness.js"
  ],
  "artifact_sha256": {
    "repro/proof/fixed-NodeVM-1.log": "f4eefd13ed07587f938ba13a83b66a506ae68ff4541ea6cd663e051fb15260c6",
    "repro/proof/fixed-NodeVM-2.log": "bae05e22e314900bda2d10839e008e68d337abf99af564f7f633f7644da5358c",
    "repro/proof/fixed-VM-1.log": "99bf47c1847cdaee073f5df768039c4cde91e00e282fc282ebddf09a8bac439f",
    "repro/proof/fixed-VM-2.log": "d8a1f84908166a7309cb9ad63678761a31358ed26fcabf85b15bfca4fc5b976d",
    "repro/proof/marker-vulnerable-NodeVM-1.txt": "e770b728d45276e60341bf763ac53d0ed5ccc13ecbdd4032867715ed0dc867f1",
    "repro/proof/marker-vulnerable-NodeVM-2.txt": "4a920ff4988115be308b1246eede1e76881baa2fa34a765f0b1e5fd7ec9e94ba",
    "repro/proof/marker-vulnerable-VM-1.txt": "0926a6150c45875949217638ca5b520a4edcd1f824e2dceb341e4be4bd1263d5",
    "repro/proof/marker-vulnerable-VM-2.txt": "a6eda3d64796118c0e07fc982ce56ca959f707f0d24954c85fb953a8f9aa807f",
    "repro/proof/vulnerable-NodeVM-1.log": "cccd7c7a6cac469507670dab898b4abba9f5755cbcecf0746f3db40eaafdaf5d",
    "repro/proof/vulnerable-NodeVM-2.log": "a87bcea514adbdaafa7fd38a1b215fd4967b76babc6de399e1e584572f4f34a4",
    "repro/proof/vulnerable-VM-1.log": "da6597c715bb504795bef2d2da3c425ad0448025515238c2749cd4085a416397",
    "repro/proof/vulnerable-VM-2.log": "8a87b10a8b322078a66981e8d6006c1932a19da9e3ae6b7d7216b6a12a7d5ec4",
    "repro/harness.js": "52e511ac2079a290ad2d06ddd9c3ef3e86ba8c6b2cf670616fcfb6696d1000f0"
  },
  "notes": "vulnerable=vm2@3.12.0 (npm tarball sha256 263d59bfcdd5107915551b4181228fb5c8dd98f043faa78f2b8fb33f8fe8ffa8), fixed=vm2@3.12.1 (npm tarball sha256 afa9d765ff89edcd8472ef2fb3e1707d2e9077aeffe8ea861fd46aa696726513); fixed_blocked=1"
}