GHSA-633R-HQ9M-C4FF vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Summary Untrusted JavaScript running inside new VM.run / new NodeVM.run can bypass vm.freeze / vm.readonly and mutate a host object the embedder explicitly marked read-only - the documented contract is "prevent sandboxed scripts from adding, changing, or deleting properties". If the frozen host...

EUVD-2026-81598

vm2: vm.freeze/vm.readonly bypass via accessor descriptor...

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Summary Untrusted JavaScript running inside new VM.run / new NodeVM.run can bypass vm.freeze / vm.readonly and mutate a host object the embedder explicitly marked read-only - the documented contract is "prevent sandboxed scripts from adding, changing, or deleting properties". If the frozen host...

GHSA-9F3G-34X8-92JC Duplicate Advisory: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-633r-hq9m-c4ff. This link is maintained to preserve external references. Original Description vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects,...

Duplicate Advisory: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-633r-hq9m-c4ff. This link is maintained to preserve external references. Original Description vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects,...

CVE-2026-92949 vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze and vm.readonly protections. Attackers can use Object.getOwnPropertyDescriptor or lookupSetter to extract and invoke host object setters...

CVE-2026-92949

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. An attacker can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host o...

PT-2026-105499

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-633r-hq9m-c4ff. This link is maintained to preserve external references. Original Description vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects,...