Lucene search
+L

3 matches found

Patchstack
Patchstack
•added 2026/10/01 3:34 p.m.•6 views

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

NPM: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.4, = 3.11.6...

9.5CVSS5.9AI score0.00673EPSS
SaveExploits0References7Affected Software1
Patchstack
Patchstack
•added 2026/10/01 3:28 p.m.•7 views

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

NPM: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector vulnerability discovered by ? in WordPress Npm vm2 versions = 3.10.2, = 3.11.6...

9.8CVSS5.9AI score0.00841EPSS
SaveExploits0References6Affected Software1
Patchstack
Patchstack
•added 2026/10/01 3:27 p.m.•8 views

NPM: vm2 NodeVM can replace the host process TLS trust store

NPM: vm2 NodeVM can replace the host process TLS trust store vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.3, = 3.11.6...

10CVSS5.9AI score0.00289EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder