Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

32 records

Vendor: patriksimek Component: Vm2 Clear all filters
TI-2026-32048 CVE-2026-44005 · GHSA-vwrp-x96c-mhwq

vm2: Sandbox escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00831 Published 2026-05-13 Fixed in 3.11.0 CWE-1321
TI-2026-33200 CVE-2026-45411 · GHSA-248r-7h7q-cr24

vm2: Sandbox Breakout Using Async Generator

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00568 Published 2026-05-13 Fixed in 3.11.3 CWE-668
TI-2026-32049 CVE-2026-44006 · GHSA-qcp4-v2jj-fjx8

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00815 Published 2026-05-13 Fixed in 3.11.0 CWE-94
TI-2026-32040 CVE-2026-43997 · GHSA-47x8-96vw-5wg6

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00976 Published 2026-05-13 Fixed in 3.11.0 CWE-94
TI-2026-21442 CVE-2026-26956 · GHSA-ffh4-j6h5-pg66

vm2: WASM Sandbox Escape (Node 25 only)

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01086 Published 2026-05-04 Fixed in 3.10.5 CWE-693
TI-2026-21288 CVE-2026-26332 · GHSA-55hx-c926-fr95

vm2: Sandbox Escape

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0071 Published 2026-05-04 Partial fix · 3.11.0 CWE-693
TI-2026-19982 CVE-2026-24781 · GHSA-v37h-5mfm-c47c

vm2: Sandbox Breakout Through Inspect

Priority HIGH 82

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2026-05-04 Partial fix · 3.11.0 CWE-693
TI-2026-18236 CVE-2026-22709 · GHSA-99p7-6v5w-7xg8

vm2 has a Sandbox Escape

Priority MEDIUM 51

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0127 Published 2026-01-26 Fixed in 3.10.2 CWE-693
TI-2023-19336 CVE-2023-37903 · GHSA-g644-9gfx-q4q4

Sandbox Escape in vm2

Priority MEDIUM 50

vm2 is an open source vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04215 Published 2023-07-21 Partial fix CWE-78
TI-2023-19074 CVE-2023-37466 · GHSA-cchq-frgv-rjh5

vm2 Sandbox Escape vulnerability

Priority MEDIUM 55

vm2 is an advanced vm/sandbox for Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03867 Published 2023-07-13 Partial fix · 3.10.0 CWE-94
TI-2023-15608 CVE-2023-32314 · GHSA-whpj-8f3w-67p5

Sandbox Escape

Priority HIGH 82

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08127 Published 2023-05-15 Partial fix · 3.9.18 CWE-74
TI-2023-15607 CVE-2023-32313 · GHSA-p5gc-c584-jj6v

Inspect method manipulation in vm2

Priority MEDIUM 63

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0079 Published 2023-05-15 Partial fix · 3.9.18 CWE-74
TI-2023-14382 CVE-2023-30547 · GHSA-ch3r-j5x3-6q2m

Sandbox Escape in vm2

Priority CRITICAL 87

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.72973 Published 2023-04-17 Partial fix · 3.9.17 CWE-74
Load more