EUVD-2026-81584

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934

vm2 (a Node.js sandbox library) versions before 3.11.8 contain an incomplete fix for Error.cause sanitization . When a host-wrapped AggregateError object is revisited within a single exception handler traversal in handleException, the cycle detection bypass allows access to unsanitized host proxi...