ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root

Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root

Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root

Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10727 AIKIDO-2026-10727 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10727 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2023-30547

CVE-2023-30547 这是针对CVE-2023-30547（https://nvd.nist.gov/vuln/detail/CVE-2023-30547）的概念验证（PoC）。我在一次CTF比赛中创建了这个PoC。 用法 root@kitploit: CVE-2023-30547 PoC -h --url URL --lhost LHOST --lport LPORT 针对vm2漏洞CVE-2023-30547的PoC 选项: -h, --help 显示此帮助信息并退出 --url URL 目标URL --lhost LHOST 本地主机的IP用于反弹shell --lport...

Codify-TJNULL-OSCP-

Hack The Box — Writeup de Codify Guía completa de pruebas de penetración y writeup para la máquina Codify en Hack The Box. 📌 Información de la Máquina Campo| Valor ---|--- Nombre| Codify SO| Linux Dificultad| Fácil Conceptos Clave| vm2 RCE CVE-2023-30547, Enumeración de BD SQLite, Cracking de...

vm2 v3.11.8

vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...

ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root

Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-47686

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47698

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and...

CVE-2026-47683

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47683

In vm2

CVE-2026-47683 vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

EUVD-2026-60461

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47686 vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47686 vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

CVE-2026-47686

The GHSA advisory confirms vm2

CVE-2026-47698 vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and...