AIKIDO-2026-886598

TL;DR

The allowlist pre-check for require.external combined with a custom resolve callback validates package names with a non-anchored regular expression, matching a substring rather than the full name. Sandboxed code requests a package whose name contains an allowlisted name as a substring, so the resolver loads an unauthorized host package. Loading the colliding package can execute arbitrary code in the host context. The fix enforces exact-match validation of the external allowlist.