PT-2026-94322

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description An incorrect authorization issue exists in the external package allowlist check. The system uses non-exact substring matching instead of full package-name boundary validation. This allows attackers to...