NPM: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

NPM: vm2: vm.freeze/vm.readonly bypass via accessor descriptor vulnerability discovered by ? in WordPress Npm vm2 versions = 3.9.6, = 3.11.6...

EUVD-2026-81585

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE...

@dataform/cli (>=3.0.59-alpha.1, <=3.0.71), @hiracky16/dataform-osmosis (>=0.1.0, <=0.1.6) +16 more potentially affected by CVE-2026-92935 via vm2 (>=3.11.4, <=3.11.6)

vm2 NPM version =3.11.4, =3.0.59-alpha.1, =0.1.0, =2.32.0, =1.8.2, =1.1.0, =0.2.0, =2.32.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.74.12 and more Source cves: CVE-2026-92935 Source advisory: OSV:GHSA-8HR7-R645-PC6W...

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

GHSA-8HR7-R645-PC6W vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

Summary The NodeVM constructor computes hasRealRequireConfig using typeof requireOpts === 'object' && requireOpts !== null, so require: bypasses the guard intended to reject nesting without an explicit require configuration. makeResolverFromLegacyOptions then destructures the array to undefined...

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

Summary The NodeVM constructor computes hasRealRequireConfig using typeof requireOpts === 'object' && requireOpts !== null, so require: bypasses the guard intended to reject nesting without an explicit require configuration. makeResolverFromLegacyOptions then destructures the array to undefined...

NPM: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

NPM: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection vulnerability discovered by ? in WordPress Npm vm2 versions 3.11.6...

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

Summary Untrusted JavaScript run by vm2 can escape the sandbox and execute arbitrary commands in the host Node.js process when an embedder-exposed host Promise rejects. This is an incomplete fix for GHSA-m283-3h24-438v: the advisory's capability-bearing rejection rebuild runs only through this...

EUVD-2026-81587

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection...

EUVD-2026-81588

vm2 allows a sandboxed plugin to execute native code through node:sqlite...

NPM: vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

NPM: vm2 allows a sandboxed plugin to execute native code through node:sqlite vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

Summary vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ''. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension...

GHSA-46PR-C5WC-XFFX vm2 crypto builtin loads attacker native code through setEngine

Summary vm2 3.11.6 exposes the host crypto module to a NodeVM when that single builtin is allowed. The module is presented through a read-only bridge, but its functions still execute with host-process authority. crypto.setEngine accepts a filesystem path and asks OpenSSL to dynamically load the...

vm2 crypto builtin loads attacker native code through setEngine

Summary vm2 3.11.6 exposes the host crypto module to a NodeVM when that single builtin is allowed. The module is presented through a read-only bridge, but its functions still execute with host-process authority. crypto.setEngine accepts a filesystem path and asks OpenSSL to dynamically load the...

EUVD-2026-81589

vm2 crypto builtin loads attacker native code through setEngine...

NPM: vm2 crypto builtin loads attacker native code through setEngine

NPM: vm2 crypto builtin loads attacker native code through setEngine vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

@dataform/cli (>=3.0.57, <=3.0.71), @hiracky16/dataform-osmosis (>=0.1.0, <=0.1.6) +16 more potentially affected by CVE-2026-92939 via vm2 (>=3.11.3, <=3.11.6)

vm2 NPM version =3.11.3, =3.0.57, =0.1.0, =2.32.0, =1.0.0, =1.1.0, =0.2.0, =2.32.0, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.72.4, =1.74.12 and more Source cves: CVE-2026-92939 Source advisory: OSV:GHSA-46PR-C5WC-XFFX...

GHSA-27G9-P43V-CW3V vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

Reporter - Name or handle: YMsora - Report date: 2026-08-14 Summary The latest published vm2 release, 3.11.5, and the current main branch are vulnerable to a sandbox escape when used on Node.js 26. An ordinary fulfilled Promise created by an async function can retain an attacker-controlled...

@cairncms/api (>=1.0.0-beta.1, <=1.0.0-beta.4), @dataform/cli (>=3.0.46, <=3.0.71) +25 more potentially affected by CVE-2026-92944 via vm2 (>=3.10.2, <=3.11.6)

vm2 NPM version =3.10.2, =1.0.0-beta.1, =3.0.46, =0.1.0, =2.32.0, =0.0.16, =1.4.13, =1.0.0, =1.0.0-beta.1, =1.1.0, =0.2.0, =1.0.0, =3.1.3, =3.1.4 - knowhy 0.1.2 and more Source cves: CVE-2026-92944 Source advisory: OSV:GHSA-27G9-P43V-CW3V...

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...