v2.15.2

Release v2.15.2

Release type: stable
Release line: 2.15.x
Branch: release/2.15.x

Published Packages

• @enclave-vm/ast@2.15.2
• @enclave-vm/broker@2.15.2
• @enclave-vm/browser@2.15.2
• @enclave-vm/client@2.15.2
• @enclave-vm/core@2.15.2
• @enclave-vm/react@2.15.2
• @enclave-vm/runtime@2.15.2
• @enclave-vm/stream@2.15.2
• @enclave-vm/types@2.15.2

[2.15.2] - 2026-08-07

Security

• Addressed GHSA-3279 by enhancing protection against prototype pollution and descriptor mutation in the secure proxy.
• Introduced safeguards to prevent escape through improper interception of intrinsics and secure sandbox priming before code execution.

Changed

• Updated no-computed-destructuring.rule.ts to block dangerous static destructuring keys and improve key validation logic.
• Enhanced secure proxy module by introducing a read-only Reflect proxy, and pinning intrinsics to avoid weakening the membrane.

Fixed

• Fixed issues in the runtime membrane that could lead to exposure of host Function constructor through improper use.
• Corrected handling of destructuring patterns in the interpreter, ensuring blocked keys are confirmed and handled before binding.

Acknowledgements

Thanks to @zolbooo for privately reporting the sandbox escape tracked in GHSA-3279-86j6-jpr3, with a clear PoC that made the fix quick to land.