CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Patchstack•added 2026/10/01 3:34 p.m.•3 views

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

9.5CVSS5.9AI score0.00673EPSS

SaveExploits0References7Affected Software1

Patchstack•added 2026/10/01 3:28 p.m.•4 views

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...

9.8CVSS5.9AI score0.00841EPSS

SaveExploits0References6Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by