ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in @rootio/vm2 - Patched by Root

Root has patched CVE-2026-24781 in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...

CVE-2026-24781

creationtimestamp| type| source ---|---|--- 2026-05-04 18:30:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cks5l6l26 2026-05-08 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mleqj3brke26 2026-07-09 07:48:04+00:00| seen|...

CVE-2026-24781 vm2: Sandbox Breakout Through Inspect

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been...