CVE-2026-47141 vm2: NodeVM observability builtins leak host process and HTTP request data

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnosticschannel, asynchooks, and perfhooks builtins are not blocked by the dangerous builtin denylist. These modules...

EUVD-2025-7092

Malicious code in bioql PyPI...

PT-2021-4637

Name of the Vulnerable Software and Affected Versions UserGate UTM versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the UserGate UTM corporate firewall UserGate D500. Exploitation of this issue may allow a remote...