ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root

Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47139 CVE-2026-47139 in vm2 - Patched by Root

Root has patched CVE-2026-47139 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-V836-6XW4-9CX3 GHSA-v836-6xw4-9cx3 in vm2 - Patched by Root

Root has patched GHSA-v836-6xw4-9cx3 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root

Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44009 CVE-2026-44009 in vm2 - Patched by Root

Root has patched CVE-2026-44009 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in vm2 - Patched by Root

Root has patched CVE-2026-24781 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root

Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root

Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44005 CVE-2026-44005 in vm2 - Patched by Root

Root has patched CVE-2026-44005 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-22709 CVE-2026-22709 in vm2 - Patched by Root

Root has patched CVE-2026-22709 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root

Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root

Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-100722

A flaw was found in vm2. An attacker who can execute untrusted code within the sandbox can trigger an unhandled error by instantiating host-provided functions that return a rejected asynchronous operation Promise. Due to missing error handling in the sandbox-to-host object construction trap, the...

ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in vm2 - Patched by Root

Root has patched GHSA-2cm2-m3w5-gp2f in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44000 CVE-2026-44000 in vm2 - Patched by Root

Root has patched CVE-2026-44000 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in vm2 - Patched by Root

Root has patched CVE-2026-44003 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-43998 CVE-2026-43998 in vm2 - Patched by Root

Root has patched CVE-2026-43998 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-43999 CVE-2026-43999 in vm2 - Patched by Root

Root has patched CVE-2026-43999 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in vm2 - Patched by Root

Root has patched CVE-2026-44002 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-100723

A flaw was found in vm2. When an application permits the sandbox to access built-in Node.js modules such as the zlib compression library, returned data buffers fail to maintain memory isolation from the host system. An attacker executing untrusted code within the sandbox can inspect and alter the...