Skip to content
patriksimek vm2
-
CVE-2026-45411
Critical 9.8
vm2: Sandbox Breakout Using Async Generator
0.6%
-
CVE-2026-44009
Critical 9.8
vm2: Sandbox Breakout Through Null Proto Exception
1.0%
-
CVE-2026-44008
Critical 9.8
vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
0.9%
-
CVE-2026-44007
Critical 9.1
vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution
1.0%
-
CVE-2026-44006
Critical 10.0
vm2: Sandbox Escape
0.8%
-
CVE-2026-44004
High 7.5
vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)
0.4%
-
CVE-2026-44003
Medium 5.3
vm2: Transformer Fast-Path Bypass Exposes Internal State Variable
0.2%
-
CVE-2026-44002
Medium 5.8
vm2: Host File Path Disclosure via Stack Trace Information Leak
0.2%
-
CVE-2026-44001
High 8.6
vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
0.4%
-
CVE-2026-44000
Medium 6.5
vm2: sandbox boundary bypass via host Promise resolution preserving host object identity
0.2%
-
CVE-2026-43999
Critical 9.9
vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape
1.0%
-
CVE-2026-43998
High 8.5
vm2: NodeVM require.root bypass via symlink traversal allows sandbox escape
0.7%
-
CVE-2026-43997
Critical 10.0
vm2: Sandbox Escape
1.0%
-
CVE-2026-26956
Critical 9.8
vm2: WASM Sandbox Escape (Node 25 only)
1.1%
-
CVE-2026-26332
Critical 9.8
vm2: Sandbox Escape
0.7%
-
CVE-2026-24781
Critical 9.8
vm2: Sandbox Breakout Through Inspect
1.2%
-
CVE-2026-24120
Critical 9.8
vm2: Sandbox Breakout Through Promise Species
0.9%
-
CVE-2026-24118
Critical 9.8
VM2 Sandbox Breakout Through __lookupGetter__
0.9%
-
CVE-2026-22709
Critical 9.8
vm2 has a Sandbox Escape
1.3%
-
CVE-2023-37903
Critical 9.8
Sandbox Escape in vm2
4.2%
-
CVE-2023-37466
Critical 9.8
vm2 Sandbox Escape vulnerability
3.9%
-
CVE-2023-32314
Critical 9.8
Sandbox Escape
8.1%
-
CVE-2023-32313
Medium 5.3
Inspect method manipulation in vm2
0.8%
-
CVE-2023-30547
Critical 9.8
Sandbox Escape in vm2
73.0%
-
CVE-2023-29199
Critical 9.8
vm2 Sandbox escape vulnerability
3.9%
-
CVE-2023-29017
Critical 10.0
vm2 Sandbox Escape vulnerability
63.2%
-
CVE-2022-36067
Critical 10.0
vm2 vulnerable to Sandbox Escape before v3.9.11
47.9%