Read the docs

patriksimek

Records81All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical54CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

patriksimek records in CISA KEV

No patriksimek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vm2 32 records CRITICAL

Records

32 records in Vm2 · all components

TI-2023-14382 CVE-2023-30547 · GHSA-ch3r-j5x3-6q2m

Sandbox Escape in vm2

Priority CRITICAL 87

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.72973 Published 2023-04-17 Partial fix · 3.9.17 CWE-74
TI-2023-13478 CVE-2023-29017 · GHSA-7jxr-cg7f-gpgv

vm2 Sandbox Escape vulnerability

Priority HIGH 84

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.63186 Published 2023-04-06 Partial fix · 3.9.15 CWE-913
TI-2026-33200 CVE-2026-45411 · GHSA-248r-7h7q-cr24

vm2: Sandbox Breakout Using Async Generator

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2026-05-13 Fixed in 3.11.3 CWE-668
TI-2026-32049 CVE-2026-44006 · GHSA-qcp4-v2jj-fjx8

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00815 Published 2026-05-13 Fixed in 3.11.0 CWE-94
TI-2026-32048 CVE-2026-44005 · GHSA-vwrp-x96c-mhwq

vm2: Sandbox escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00831 Published 2026-05-13 Fixed in 3.11.0 CWE-1321
TI-2026-32040 CVE-2026-43997 · GHSA-47x8-96vw-5wg6

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00976 Published 2026-05-13 Fixed in 3.11.0 CWE-94
TI-2026-21442 CVE-2026-26956 · GHSA-ffh4-j6h5-pg66

vm2: WASM Sandbox Escape (Node 25 only)

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01086 Published 2026-05-04 Fixed in 3.10.5 CWE-693
TI-2026-21288 CVE-2026-26332 · GHSA-55hx-c926-fr95

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0071 Published 2026-05-04 Partial fix · 3.11.0 CWE-693
TI-2026-19982 CVE-2026-24781 · GHSA-v37h-5mfm-c47c

vm2: Sandbox Breakout Through Inspect

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2026-05-04 Partial fix · 3.11.0 CWE-693
TI-2023-15608 CVE-2023-32314 · GHSA-whpj-8f3w-67p5

Sandbox Escape

Priority HIGH 82

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08127 Published 2023-05-15 Partial fix · 3.9.18 CWE-74
TI-2022-16490 CVE-2022-36067 · GHSA-mrgp-mrhc-5jrq

vm2 vulnerable to Sandbox Escape before v3.9.11

Priority HIGH 82

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.47868 Published 2022-09-06 Partial fix · 3.9.11 CWE-913
TI-2022-09449 CVE-2022-25893 · GHSA-4w2j-2rg4-5mjw

Arbitrary code execution in vm2

Priority HIGH 82

The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01542 Published 2022-12-21 Fixed in 3.9.10 CWE-471
TI-2023-15607 CVE-2023-32313 · GHSA-p5gc-c584-jj6v

Inspect method manipulation in vm2

Priority MEDIUM 63

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0079 Published 2023-05-15 Partial fix · 3.9.18 CWE-74
Load more
Open these records in search →