677 matches found
CVE-2026-22709 vm2 has a Sandbox Escape
vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of...
Improper Control of Dynamically-Managed Code Resources
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources due to the unsafe usage of the .call with globalPromise.prototype.then callback function. An...
vm2 has a Sandbox Escape
In vm2 for version 3.10.0, Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. js const VM = require"vm2"; const code = const error = new Error; error.name = Symbol; const f = async = error.stack...
GHSA-99P7-6V5W-7XG8 vm2 has a Sandbox Escape
In vm2 for version 3.10.0, Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. js const VM = require"vm2"; const code = const error = new Error; error.name = Symbol; const f = async = error.stack...
PT-2026-4821
Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.10.2 Description vm2 is a Node.js library used to create sandboxed environments for executing untrusted code. A flaw exists in versions prior to 3.10.2 where the sanitization of Promise.prototype.then and...
vm2 security vulnerabilities
vm2 is a high-level virtual machine/sandbox developed by Czech developer Patrik Simek. It runs untrusted code using Node’s built-in modules listed in the allowlist. Versions of vm2 prior to 3.10.2 have security vulnerabilities; these vulnerabilities stem from Promise callback cleanup mechanisms...
MiracleLinux 8 : firefox-128.10.1-1.el8_10.ML.1 (AXSA:2025-9963:16)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9963:16 advisory. firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919...
MiracleLinux 7 : firefox-128.10.1-1.0.1.el7.AXS7 (AXSA:2025-9965:17)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9965:17 advisory. firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919...
curl: Heap Out-of-Bounds Read in lib/http2.c via Malformed PUSH_PROMISE Headers
Summary A heap-based out-of-bounds read vulnerability exists in libcurl's HTTP/2 implementation. The onheader callback in lib/http2.c incorrectly treats header names and values provided by nghttp2 as null-terminated C-strings. Specifically, passing these pointers to curlmaprintf with the %s forma...
curl: Heap Buffer Over-read in lib/http2.c (on_header) handling PUSH_PROMISE frames
Summary: I have discovered a Heap Buffer Over-read vulnerability in lib/http2.c within the onheader callback function. When processing HTTP/2 PUSHPROMISE frames, the code incorrectly uses the %s format specifier on raw pointers provided by nghttp2. According to nghttp2 documentation, the name and...
Malicious code in chai-promise-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ecbe8f1fc2ecc76ad2c336265b5750a854b1e0cf54067d357cd5638ad5c501 The package chai-promise-chain was found to contain malicious code...
MAL-2025-191566 Malicious code in chai-promise-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ecbe8f1fc2ecc76ad2c336265b5750a854b1e0cf54067d357cd5638ad5c501 The package chai-promise-chain was found to contain malicious code...
TencentOS Server 3: firefox (TSSA-2025:0461)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0461 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
EUVD-2025-177084
Malicious code in postgres-promise-transform-farout npm...
EUVD-2025-176312
Malicious code in sociobiology-promise-spinner-docusaurus npm...
EUVD-2025-177014
Malicious code in promise-jovian-cli-nightwatch npm...
EUVD-2025-175894
Malicious code in transpile-refactor-protected-promise-interface npm...
EUVD-2025-179707
Malicious code in cloud-user-static-promise-stub npm...