vm2

vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation npm install vm2 Quick Examples import VM from...

n8n-function-vm2

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · n8n-function-vm2 Write-up: https://abraxaslabs.tech/research/n8n-function-vm2 n8n-function-vm2 n8n 2.42.0 - n8n GmbH GHSA-j4p8-h8mh-rh8q moved n8n-nodes-base.code onto the JS task-runner child. Production spawn adds...

Flowise 3.1.2 NodeVM Sandbox Escape

Flowise versions through 3.1.2 contain a NodeVM sandbox override that lets authenticated custom-function users re-enable blocked Node.js modules and execute arbitrary system commands. Version 3.1.3 fixes the issue...

EUVD-2026-82900

vm2 contains a sandbox escape vulnerability...

vm2 contains a sandbox escape vulnerability

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits childprocess despite blocking other host-spawning modules. Attackers can require childprocess and execute arbitrary commands on the host system when NodeVM is configured with...

Protection Mechanism Failure

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Protection Mechanism Failure via the vm2/@flowiseai/nodevm JavaScript sandbox in the /api/v1/node-custom-function endpoint. An authenticated attacker can supply attacker-controlled...

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

Protection Mechanism Failure

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Protection Mechanism Failure via the vm2/@flowiseai/nodevm JavaScript sandbox in the /api/v1/node-custom-function endpoint. An authenticated attacker can supply attacker-controlled executablePath and args...

GHSA-5H3F-Q97H-CCVC vm2: NodeVM custom resolution bypasses external path boundaries

Summary At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the...

NPM: vm2: NodeVM custom resolution bypasses external path boundaries

NPM: vm2: NodeVM custom resolution bypasses external path boundaries vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...

vm2: NodeVM custom resolution bypasses external path boundaries

Summary At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the...

EUVD-2026-87858

vm2: NodeVM custom resolution bypasses external path boundaries...

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

Summary When an application explicitly exposes Node's zlib module through vm2's NodeVM builtin allowlist, an untrusted guest can obtain a pool-backed host Buffer from zlib.deflateSync, create a full-width view of its backing ArrayBuffer, read bytes outside the compressed result, and flip a byte i...

NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...

GHSA-489W-W794-JQ94 vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

Summary When an application explicitly exposes Node's zlib module through vm2's NodeVM builtin allowlist, an untrusted guest can obtain a pool-backed host Buffer from zlib.deflateSync, create a full-width view of its backing ArrayBuffer, read bytes outside the compressed result, and flip a byte i...

GHSA-F8GF-W286-FMQ2 vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

Summary When allowAsync is set to false, vm2 is expected to reject attempts to run asynchronous code. Direct use of Promise.prototype.then is blocked, but Promise static methods still assimilate attacker-controlled thenables. Promise.resolvethenable, Promise.allthenable, Promise.racethenable,...

vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

Summary When allowAsync is set to false, vm2 is expected to reject attempts to run asynchronous code. Direct use of Promise.prototype.then is blocked, but Promise static methods still assimilate attacker-controlled thenables. Promise.resolvethenable, Promise.allthenable, Promise.racethenable,...

NPM: vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

NPM: vm2: allowAsync: false can be bypassed through Promise thenable assimilation in VM and NodeVM vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.7...

EUVD-2026-81608

vm2: allowAsync: false can be bypassed through Promise thenable assimilation in VM and NodeVM...

GHSA-88HF-G992-JG85 vm2: Sandbox Escape (NodeVM)

Summary It being possible to obtain the host proto getter/setter, has been used in many reports: - https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq - https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg -...