203 matches found
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation npm install vm2 Quick Examples import VM from...
n8n-function-vm2
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds --disallow-code-generation-from-strings and...
EUVD-2026-82900
vm2 contains a sandbox escape vulnerability...
vm2 contains a sandbox escape vulnerability
vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits childprocess despite blocking other host-spawning modules. Attackers can require childprocess and execute arbitrary commands on the host system when NodeVM is configured with...
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium
Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...
vm2: NodeVM custom resolution bypasses external path boundaries
Summary At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the...
EUVD-2026-87858
vm2: NodeVM custom resolution bypasses external path boundaries...
NPM: vm2: NodeVM custom resolution bypasses external path boundaries
NPM: vm2: NodeVM custom resolution bypasses external path boundaries vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...
GHSA-5H3F-Q97H-CCVC vm2: NodeVM custom resolution bypasses external path boundaries
Summary At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the...
GHSA-489W-W794-JQ94 vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
Summary When an application explicitly exposes Node's zlib module through vm2's NodeVM builtin allowlist, an untrusted guest can obtain a pool-backed host Buffer from zlib.deflateSync, create a full-width view of its backing ArrayBuffer, read bytes outside the compressed result, and flip a byte i...
NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...
vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
Summary When an application explicitly exposes Node's zlib module through vm2's NodeVM builtin allowlist, an untrusted guest can obtain a pool-backed host Buffer from zlib.deflateSync, create a full-width view of its backing ArrayBuffer, read bytes outside the compressed result, and flip a byte i...
vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
Summary When allowAsync is set to false, vm2 is expected to reject attempts to run asynchronous code. Direct use of Promise.prototype.then is blocked, but Promise static methods still assimilate attacker-controlled thenables. Promise.resolvethenable, Promise.allthenable, Promise.racethenable,...
NPM: vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
NPM: vm2: allowAsync: false can be bypassed through Promise thenable assimilation in VM and NodeVM vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.7...
GHSA-F8GF-W286-FMQ2 vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
Summary When allowAsync is set to false, vm2 is expected to reject attempts to run asynchronous code. Direct use of Promise.prototype.then is blocked, but Promise static methods still assimilate attacker-controlled thenables. Promise.resolvethenable, Promise.allthenable, Promise.racethenable,...
EUVD-2026-81608
vm2: allowAsync: false can be bypassed through Promise thenable assimilation in VM and NodeVM...
EUVD-2026-81604
vm2: Sandbox Escape NodeVM...
vm2: Sandbox Escape (NodeVM)
Summary It being possible to obtain the host proto getter/setter, has been used in many reports: - https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq - https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg -...
NPM: vm2: Sandbox Escape (NodeVM)
NPM: vm2: Sandbox Escape NodeVM vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.7...
GHSA-88HF-G992-JG85 vm2: Sandbox Escape (NodeVM)
Summary It being possible to obtain the host proto getter/setter, has been used in many reports: - https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq - https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg -...