Permissions policies can be bypassed via Module._load and require.extensions (High) (CVE-2023-30587)

Internet Bug Bounty disclosed a bug submitted by mattaustin: https://hackerone.com/reports/2188126 – Bounty: $1165