All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.
agoric realms-shim