CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Patchstack•added 2026/10/05 10:47 p.m.•22 views

NPM: vm2: Sandbox Escape (NodeVM)

NPM: vm2: Sandbox Escape NodeVM vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.7...

10CVSS8.3AI score0.00712EPSS

SaveExploits0References8Affected Software1

Patchstack•added 2026/10/01 3:34 p.m.•13 views

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

9.5CVSS5.9AI score0.00673EPSS

SaveExploits0References7Affected Software1

Patchstack•added 2026/10/01 3:28 p.m.•13 views

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...

9.8CVSS8.5AI score0.00841EPSS

SaveExploits0References6Affected Software1

Patchstack•added 2026/10/01 3:27 p.m.•21 views

NPM: vm2 NodeVM can replace the host process TLS trust store

NPM: vm2 NodeVM can replace the host process TLS trust store vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

10CVSS8.3AI score0.00289EPSS

SaveExploits0References6Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by