Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/17 2:17 p.m.•14 views

CVE-2026-92933

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS0.00372EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 1:45 p.m.•7 views

CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/17 1:45 p.m.•12 views

EUVD-2026-81583

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS6AI score0.00372EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/17 1:45 p.m.•14 views

CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS6.1AI score0.00372EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/17 1:45 p.m.•32 views

CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS0.00372EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-92933: Exposure of Sensitive Information to an Unauthorized Actor

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

6.9CVSS6AI score0.00372EPSS
SaveExploits0References2
Rows per page
Query Builder